At Trino Casino, we operate trinoo.de and we take protecting the personal data of our German players conscientiously. As a licensed entertainment platform, we’ve established our operations to fulfill the strict standards of the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG). This document describes exactly how we collect, hold, process, and protect your information when you access our website, play games, or communicate with our affiliate systems. We believe transparency is essential for a trusting relationship. By presenting our data handling practices clearly, we want you to be confident that your sensitive financial details and personal identifiers are kept in a secure digital environment, managed by a responsible data controller that respects local laws and jurisdictional boundaries.
4. Data Preservation Plans and De-identification Methods
We never hold your personal data forever. We observe a strict storage limitation principle. Active customer accounts hold data for the duration of the business relationship, from the moment you register until you formally close the account. After account closure, a holding period starts, driven mostly by German tax legislation and anti-money laundering rules. Transactional logs, identification documents collected under Know Your Customer protocols, and wagering history are securely archived for ten years from the end of the calendar year of the last transaction. Once that statutory retention window expires, we permanently destroy or irreversibly anonymize the records so re-identification becomes technically impossible. Web server log data that contains IP addresses gets truncated after a strict thirty‑day cycle to reduce security risks. For accounts that go dormant—no activity but not closed—we send a proactive reminder before the dormancy threshold, so we can ask for renewed consent or start the deletion process, always in line with the storage limitation principle.
Common Questions
How does Trino Casino check my age according to German regulations?
We utilize a multi-layered system: automated checks against national databases and human document review. When you sign up, you must upload your national ID card or passport through an encrypted portal. Our compliance team checks this with the Schufa identity service to establish legal age. If something is inconsistent, we temporarily restrict the account until a video identification call with a certified agent can clarify the situation, all in line with the German Interstate Treaty on Gambling.
Can my personal data be shared with the affiliate who referred me?
No. Our affiliate programme employs a strict aggregation firewall. We never share your name, contact details, or payment records with the referring affiliate. The partner only views a pseudonymized dashboard with confirmed registration counts and a statistical summary of net gaming revenue. Our affiliate agreements expressly prohibit them from attempting to identify individual players. This keeps your gameplay completely separate from the marketing channel that brought you to Trino Casino.
How can permanently cancel my marketing consent?
Go to “Communication Settings” in your account dashboard and turn off promotional channels. Every marketing email we send has a one‑click unsubscribe link at the bottom that works right away. To withdraw consent for postal mail or SMS, contact our Data Protection Officer through the support ticket system. We’ll stop direct marketing within at most 48 hours after receiving your request.
What happens to my data if Trino Casino ceases operations?
If business ever stops, we are legally required to notify the competent German data protection authority and all active users in advance. Mandatory transactional logs and identification records will be securely transferred to a certified archival service or handed over to the responsible regulatory body for as long as the law demands. Any data that isn’t mandatory gets securely destroyed using cryptographic wiping techniques before the closure of our servers is finalized.
Does Trino Casino use automated decision-making for payments?
We use a limited automated profiling system to flag possible fraud or bonus abuse. If the system blocks a withdrawal, we’re required by law to involve a human. Our financial risk team manually checks every flagged transaction before we tell you the final decision. You can challenge that decision, give your side, and ask for a full manual review by our risk management specialists.
What is the process to receive a complete record of my stored data?
Email us from the address linked to your account to our Data Protection Officer, put “SAR” in the subject line. We’ll confirm your identity with a two‑factor step. Subsequently, we compile your data from all systems—chat logs, game history, identity documents—and create a digitally signed PDF and a machine‑readable JSON file, which will be sent to you within one calendar month.
7. Cookie Management and Tracking Technologies for Regulatory Compliance
Our website utilizes different digital markers, and our consent management system ensures that no unnecessary trackers trigger until a German user gives active consent through our detailed settings panel. Required session cookies, which do not store personal information but keep your gaming session and security tokens working, are exempt from approval requirements under the ePrivacy Regulation as implemented in German legislation. For persistent analytics and affiliate attribution cookies, we employ backend tagging where possible to minimize client‑side exposure. Our affiliate tracking pixel functions on a first-party data model to work around current browser restrictions, allowing precise attribution without aggressive tracking scripts that are prohibited under German internet law. We’ve categorized all tracking codes with detailed descriptions of their purpose, timeframe, and the outside providers engaged, so you can modify your choices at any time. Declining marketing cookies doesn’t harm the performance of the casino lobby or payment systems. That reflects our data-protection approach: basic services remain fully accessible no matter what consent choices you make.
2. Categories of Player Details Obtained at Sign-Up and Gameplay
To offer a smooth entertainment experience that satisfies German regulations, we gather a few particular types of personal data, just what is necessary. During account creation, we require identification details: your legal first and last name, residential address with postal code, verified email address, and date of birth to ensure you satisfy the strict age minimum established by German regulators. When you begin gaming, we manage financial transaction data—deposit amounts, withdrawal methods, partial payment card numbers encrypted with TLS, and e-wallet identifiers. Our systems capture technical device data like your IP address, which we restrict by location to ensure you’re in a permitted location, along with browser fingerprint hashes and operating system specs. We also monitor usage patterns and game session logs, recording bet history and time spent playing, so we can satisfy our responsible gaming obligations. We do not obtain special categories of sensitive data except if you freely give that information during a responsible gaming self-assessment or a support inquiry.
5. Cross-border Movements and Technical Security Measures
Our primary data processing systems are located in protected data centers in the European Union, but occasionally we must utilize sub-processors in various countries. In these limited cases, we guarantee the same standard of protection by implementing Standard Contractual Clauses approved by the European Commission, along with a comprehensive Transfer Impact Assessment. To safeguard your financial data from unauthorized access during communication, we enforce Transport Layer Security (TLS 1.3) encryption across all endpoints, refusing obsolete cipher suites. At rest, personal data stored in our managed database clusters is shielded by AES‑256 encryption, and access to decryption keys is confined to a segregated privileged access management system. We conduct ongoing vulnerability scans, required penetration tests, and strict logical access controls so exclusively the people who must have it can see your data. We employ a specialized Data Protection Officer you can access through our platform, and we maintain an incident response plan that obligates us to alert the pertinent German supervisory authority within 72 hours if a personal data breach could put your rights at risk.
3. Detailed Processing Activities Pertaining to the Affiliate Programme
Our affiliate network, available on our legal and affiliates hub, functions as a separate data processing area. We act as a joint controller together with our marketing partners. When a German webmaster or content creator signs up for our partner program, we collect business details like tax identification numbers, bank account information for paying commissions, and traffic source analytics. Our tracking mechanism employs first‑party cookies dropped via a unique affiliate link, which lets us attribute referred traffic to the correct partner account without capturing the browsing history of unregistered visitors. We handle referred player data in a pseudonymized format for commission calculation, so the affiliate observes aggregated performance numbers rather than individual player identities. We check player activity logs against traffic sources to catch bonus abuse or fake incentivized traffic; this is based on our contractual and legitimate business interests. We have a strict affiliate code of conduct that forbids partners from targeting self-excluded individuals or using unauthorized direct marketing that could compromise the privacy expectations of the German audience.
6. Applying Your own Prerogatives According to German legal and European Regulations
If you are a resident of Germany, you are entitled to a range of entitlements that we have made easy to enforce. You may file a data access request at any time. We must to verify whether we process your personal details and give you a version in a organized, commonly used, machine‑readable layout within 30 days. The right to amendment lets you correct stale or inaccurate profile information without hesitation, which is vital for seamless payment processing. In specific situations, you may request a restriction of operations, notably if you dispute the accuracy of data while we verify it. The right to deletion, frequently referred to as the “right to be forgotten,” takes effect when the data is no longer required for the original goal, though legal retention obligations may momentarily supersede this demand. You additionally possess the right to information portability for information furnished under agreement or contractual terms, so you can move your transaction record to a different provider. You possess an total entitlement to refuse direct marketing, and you can object to data handling based on legitimate interests, which we’ll evaluate against our legitimate justifiable bases. Complaints can be filed directly with the data protection authority of your German federal state if you think a infringement has taken place.
1. Určení správce údajů a právní důvod zpracování
We are the data controller for all personal information collected through trinocasino at trinoo.de, which is tailored for users in Germany. Our legal division is situated at a registered office in the European Economic Area, ensuring full compliance with GDPR enforcement. For processing your data, we depend on six specified lawful bases. Typically, we process your data to satisfy our contractual commitments—including placing bets, processing withdrawals, and keeping your account active. We also rely on legitimate interest for analytics and security purposes, like fraud detection algorithms and network integrity checks, provided these do not override your fundamental rights and freedoms. When required by law, particularly under anti-money laundering regulations and German gambling ordinances, processing occurs due to a legal obligation. For marketing communications, including our affiliate programme, we rely on your explicit consent, which you can withdraw at any time without any impact on the core services we provide.