LalaBet Casino’s Privacy Policy for Austria Users

At LalaBet Casino, data protection is a basic right, and we strive to securing the private data of every user who accesses lalabet lalabet.at.at from Austria. This Privacy Policy describes how we obtain, manage, store, and disclose your data when you browse the website, register, use our gaming services, or participate in the affiliate programme. We adhere to the General Data Protection Regulation (EU) 2016/679, the Austrian Data Protection Act (DSG), and all pertinent national legislation. Our approach is based on transparency, equity, and liability. We want you to know what data we obtain, why we request it, what we process it for, and how you can stay in control of it at every step. This document also serves as a comprehensive guide for affiliate partners, outlining how their data is handled within the LalaBet Casino affiliate programme. By accessing our platform, you acknowledge that you have read and understood this policy.

Exploring Our Privacy Commitment

Privacy at LalaBet Casino is not an oversight. It shapes every framework, process, and collaboration we maintain. Our confidentiality framework meets the benchmarks set by Austrian regulators and the European Data Protection Board. Our Data Protection Officer manages all processing activities and can address any questions you have about your rights at any time. We review our procedures on a regular schedule, run data protection impact reviews, and train our staff so personal data is managed with care. The same strict controls apply to our affiliate programme. We are open about the data we collect and the objectives for which we use it, and we never sell your personal information to third parties. Our aim is to create a safe, trustworthy environment where you can appreciate our entertainment options without jeopardizing your privacy.

Using Your Personal Data Rights

Under the GDPR, you possess a set of robust rights that enable you govern your personal information. You are entitled to access the data we hold about you and to obtain a duplicate in a systematic, commonly used format. You can ask us to correct incorrect or missing information without undue delay. In particular circumstances, you may seek that we remove your data, limit its handling, or object to processing based on lawful interests. You also have the right to data mobility for information you have given us, and you can retract your permission for marketing or other consent-based processing at any time. To apply any of these rights, reach our Data Protection Officer at the email address provided in the contact section of our website. We will reply to your inquiry within one month. We will not levy a charge unless the request is obviously unfounded or disproportionate. You also have the right to submit a grievance with the Austrian Data Protection Authority if you consider our processing violates data protection law.

Cross-Border Transfers and Protections

As an online casino functioning in a global environment, some of our service providers and group companies may be located outside the European Economic Area. When we move personal data to countries without an adequacy decision from the European Commission, we establish appropriate safeguards to guarantee an equivalent level of protection. These safeguards comprise standard contractual clauses approved by the European Commission, binding corporate rules, and, where applicable, additional technical and organizational measures. We carry out transfer impact assessments to verify that the law and practices of the destination country do not reduce the safeguards we apply. For Austrian users, this signifies your data remains protected by the same rigorous standards required by the GDPR, no matter where it is processed. We are transparent about the locations of our key processors and will give you more details about the specific safeguards applied to any particular transfer upon request.

Data Storage and Safeguards

We store your personal data only for as long as necessary to meet the purposes for which it was obtained, or as stipulated by Austrian law. Account data is typically maintained for the length of your relationship with us and for up to ten years after account closure to satisfy anti-money laundering and tax retention duties. Once the retention period ends, we securely delete or anonymize your data. To protect your information, we have implemented technical and organizational security measures. These include encryption of data in transit and at rest, strict access controls based on the principle of least privilege, regular penetration testing, and continuous observation of our systems for suspicious behavior. Our staff get ongoing privacy and security training, and we keep a tested incident response plan. If a personal data breach poses a danger to your rights and freedoms, we will alert the Austrian Data Protection Authority without undue postponement and, where required, inform you directly.

Legal Foundations for Data Processing

Every processing activity we perform is based on a valid legal basis under Article 6 of the GDPR. The bases we depend on most often are the performance of a contract, compliance with a legal obligation, our legitimate interests, and your consent. When you create an account, processing your identity and financial data is necessary to perform the contract between you and LalaBet Casino. Identity verification and transaction monitoring are conducted to comply with Austrian anti-money laundering laws and the conditions of our gambling licence. We may process usage data to enhance our services based on legitimate interest, after a balancing test to ensure your rights are not overridden. For marketing communications and certain cookies, we rely on your freely given consent, which you can revoke at any time. When we process affiliate data for programme management, we usually base on contractual necessity and legitimate interest, and we ensure the processing is proportionate and does not infringe the rights of the data subjects involved.

Categories of Personal Data We Collect

To offer our services and meet our legal requirements, we collect several types of personal data. We gather this information straight from you, through your use as you browse our website, and in some cases from carefully selected third parties. We obtain only the data needed for the purposes described in this policy. These types include:

  • Identity and contact data: full name, date of birth, home address, email address, and phone number.
  • Profile and financial data: username, password, transaction history, deposit and withdrawal particulars, and payment method information.
  • Tech and usage data: IP address, browser type, device identifiers, operating system, login times, pages visited, and game session logs.
  • Verification and compliance data: copies of identification documents, proof of address, and self-exclusion or responsible gaming records.
  • Affiliate data: affiliate ID, referral links, traffic sources, commission details, and marketing performance metrics.

We keep sensitive data to a minimum and never ask for political opinions, religious beliefs, or biometric data beyond what is essential for identity verification under Austrian anti-money laundering rules. Our method ensures the collection constrained and focused. All data is processed according to the principle of data minimization.

Reasons for Processing Your Information

We handle your personal data for a well-outlined set of objectives, each connected to a specific legal basis. The main reason is to create and oversee your player account, carry out deposits and withdrawals, and deliver the gaming services you have sought under our terms and conditions. Without this processing, we would not be able to fulfill our contractual obligations to you. We also employ data to improve our platform, customize your experience, and dispatch relevant promotional offers if you have given clear consent. Complying with legal obligations is another key purpose; we authenticate your identity, monitor transactions for suspicious activity, and retain records as required by Austrian gambling regulations and anti-money laundering directives. We also process data to identify and thwart fraud, ensure game integrity, and fortify our systems. For the affiliate programme, we utilize affiliate data to follow referrals, determine commissions, and enhance our marketing partnerships.

Sharing Information with Third Parties

We provide your personal data only with vetted third parties that assist us provide our services, and we do so under strict contractual safeguards. These parties include payment service providers that manage deposits and withdrawals, identity verification and know-your-customer (KYC) providers that support us meet regulatory requirements, and IT infrastructure and hosting companies that maintain our platform secure. We may also share data with our affiliate software platform to record referrals and determine commissions for affiliate partners. In every case, we restrict the data shared to what is essential for the third party to fulfill its function. We never sell your personal data to advertisers, data brokers, or any other commercial entity. We may also have to disclose information to Austrian regulatory bodies, law enforcement agencies, or courts in response to legitimate legal requests. We assess each request diligently to ensure it is legal and proportionate before we respond.

Personal Data Management in the Affiliate Programme

This affiliate programme forms a crucial part of the LalaBet Casino ecosystem, and we enforce the same privacy standards towards affiliates as we apply to players. When you join the affiliate programme, we gather the personal data you submit during sign-up, such as your name, contact details, payment information, and tax identification number. We additionally automatically capture data on traffic generated through your affiliate links, like click-through rates, registrations, and player activity metrics. This data is utilised solely to manage the affiliate relationship, calculate and pay commissions, and improve our marketing efforts. We never share your individual affiliate data with fellow affiliates or third parties for purposes unrelated to the programme. You maintain the same data subject rights as any other participant, including the right to access, correct, and delete your information, in accordance with our legal retention obligations. We have executed data processing agreements with our affiliate system providers to guarantee your data is processed lawfully and protectively at all times.