At Trino Casino, we operate trinoo.de and we take protecting the personal data of our German players earnestly. As a licensed entertainment platform, we’ve built our operations to meet the strict standards of the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG). This document describes exactly how we collect, store, manage, and secure your information when you access our website, engage in games, or interact with our affiliate systems. We hold transparency is vital for a trusting relationship. By laying out our data handling practices clearly, we intend you to feel confident that your sensitive financial details and personal identifiers are kept in a secure digital environment, managed by a responsible data controller that adheres to local laws and jurisdictional boundaries.
1. Určení správce údajů a právní důvod zpracování
We act as the data controller for all personal details collected through Trino Casino at trinoo.de, which is customized for German users. Our legal department is based in a registered office within the European Economic Area, so we are fully subject to GDPR enforcement. When we process your data, we rely on six defined lawful bases. Typically, we process your data to satisfy our contractual commitments—including placing bets, processing withdrawals, and keeping your account active. We also use legitimate interest for analytics and security measures, such as fraud detection algorithms and network integrity checks, as long as these don’t override your fundamental rights and freedoms. Where legislation requires it, especially under anti-money laundering laws and German gambling ordinances, processing is carried out due to a legal duty. For marketing communications, including our affiliate programme, we rely on your explicit consent, which you can withdraw at any time without any impact on the core services we provide.
5. Global Transfers and Technical Safety Measures
Our primary data processing systems are located in safe data centers in the European Union, but occasionally we require sub-processors in other countries. In such limited cases, we guarantee the equivalent degree of safeguarding by employing Standard Contractual Clauses authorized by the European Commission, combined with a detailed Transfer Impact Assessment. To protect your financial data from unapproved access during transmission, we apply Transport Layer Security (TLS 1.3) encryption across all terminals, blocking outdated cipher suites. At rest, personal data stored in our managed database clusters is shielded by AES‑256 encryption, and access to decryption keys is confined to a isolated privileged access management system. We run ongoing vulnerability scans, mandatory penetration tests, and rigorous logical access controls so only the personnel who require it can view your data. We employ a specialized Data Protection Officer you can access through our platform, and we maintain an incident response plan that obligates us to notify the appropriate German supervisory authority within 72 hours if a personal data breach could place your rights at risk.
6. Exercising Your personal Entitlements According to German legal and European Regulations
For residents of Germany, you have a range of entitlements that we’ve made easy to use. You can submit a personal data inquiry at any moment. We are then required to ascertain whether we process your information and supply you with a duplicate in a organized, standard, machine‑readable layout within 30 days. The right to correction enables you to fix obsolete or incorrect profile information without delay, which is vital for smooth payment operations. In specific situations, you may request a suspension of operations, especially if you challenge the precision of data while we confirm it. The right to erasure, commonly known as the “right to be forgotten,” takes effect when the data has become unnecessary for the original purpose, though statutory retention duties may temporarily overrule this petition. You also have the right to information portability for details supplied under authorization or agreement, so you are able to shift your usage history to a different provider. You possess an absolute prerogative to object to direct marketing, and you may oppose to operations based on legitimate interests, which we will assess against our legitimate compelling grounds. Grievances can be lodged straight with the data oversight body of your German region if you think a infringement has occurred.
4. Data Storage Timelines and Anonymization Techniques
We do not retain your personal data permanently. We observe a strict storage limitation principle. Active customer accounts contain data for the duration of the business relationship, from the moment you register until you formally close the account. After account closure, a holding period starts, driven mostly by German tax legislation and anti-money laundering rules. Transactional logs, identification documents collected under Know Your Customer protocols, and wagering history are securely archived for ten years from the end of the calendar year of the last transaction. Once that statutory retention window expires, we permanently destroy or irreversibly anonymize the records so re-identification becomes technically impossible. Web server log data that contains IP addresses gets truncated after a strict thirty‑day cycle to reduce security risks. For accounts that go dormant—no activity but not closed—we send a proactive reminder before the dormancy threshold, so we can ask for renewed consent or start the deletion process, always in line with the storage limitation principle.
7. Cookie Handling and Tracking Technologies for Compliance with Laws
Our website utilizes various digital markers, and our consent management platform guarantees that no non-essential trackers activate until a German visitor gives affirmative consent through our detailed preference center. Required session cookies, which don’t store personal data but preserve your play session and security keys functioning, are exempt from consent requirements under the ePrivacy Directive as enforced in German regulations. For continuous analytics and affiliate tracking cookies, we implement backend tagging where practicable to minimize browser-side exposure. Our affiliate tracking pixel functions on a first-party data model to work around contemporary browser limitations, allowing precise attribution without invasive fingerprinting scripts that are forbidden under German digital law. We’ve categorized all tracking codes with comprehensive descriptions of their intent, length, and the third‑party vendors included, so you can adjust your settings whenever you wish. Rejecting promotional cookies does not affect the operation of the game lobby or payment systems. That reflects our privacy-first approach: basic services are entirely usable regardless of consent choices you select.
3. Particular Processing Activities Pertaining to the Affiliate Programme
Our affiliate network, available on our legal and affiliates hub, operates as a separate data processing area. We function as a joint controller together with our marketing partners. When a German webmaster or content creator registers for our partner program, we obtain business details like tax identification numbers, bank account information for paying commissions, and traffic source analytics. Our tracking mechanism uses first‑party cookies dropped via a unique affiliate link, which enables us to attribute referred traffic to the correct partner account without capturing the browsing history of unregistered visitors. We handle referred player data in a pseudonymized format for commission calculation, so the affiliate views aggregated performance numbers rather than individual player identities. We examine player activity logs against traffic sources to catch bonus abuse or fake incentivized traffic; this is founded on our contractual and legitimate business interests. We have a strict affiliate code of conduct that prohibits partners from targeting self-excluded individuals or using unauthorized direct marketing that could jeopardize the privacy expectations of the German audience.
2. Groups of Personal Data Gathered at Sign-Up and Gameplay
To provide a seamless entertainment experience that satisfies German regulations, we obtain a few certain types of personal data, just what is necessary. During account creation, we request identification details: your legal first and last name, residential address with postal code, verified email address, and date of birth to guarantee you satisfy the strict age minimum set by German regulators. When you commence playing, we process financial transaction data—deposit amounts, withdrawal methods, partial payment card numbers encrypted with TLS, and e-wallet identifiers. Our systems capture technical device data like your IP address, which we geo-filter to confirm you’re in a permitted location, along with browser fingerprint hashes and operating system specs. We also record usage patterns and game session logs, documenting bet history and time spent playing, so we can meet our responsible gaming obligations. We do not obtain special categories of sensitive data except if you willingly give that information during a responsible gaming self-assessment or a support inquiry.
Common Questions
How can Trino Casino check my age under German regulations?
We employ a multi-tiered system: computerized checks against national databases and hands-on document review. When you create an account, you must submit your national ID card or passport through an encrypted portal. Our compliance team cross‑references this with the Schufa identity service to confirm legal age. If something does not align, we provisionally restrict the account until a video identification call with a certified agent can resolve the issue, all in line with the German Interstate Treaty on Gambling.
Is it possible that my personal data be shared with the affiliate who referred me?
No. Our affiliate programme operates with a strict aggregation firewall. We never disclose your name, contact details, or payment records with the referring affiliate. The partner only sees a pseudonymized dashboard with confirmed registration counts and a statistical summary of net gaming revenue. Our affiliate agreements explicitly prohibit them from attempting to identify individual players. This keeps your gameplay completely separate from the marketing channel that brought you to Trino Casino.
How can permanently cancel my marketing consent?
Go to “Communication Settings” in your account dashboard and turn off promotional channels. Every marketing email we send has a one‑click unsubscribe link at the bottom that works right away. To withdraw consent for postal mail or SMS, contact our Data Protection Officer through the support ticket system. We’ll stop direct marketing within at most 48 hours after receiving your request.
What happens to my data if Trino Casino ceases operations?
If business ever stops, we are legally required to notify the competent German data protection authority and all active users in advance. Mandatory transactional logs and identification records will be securely transferred to a certified archival service or handed over to the responsible regulatory body for as long as the law demands. Any data that isn’t mandatory gets securely destroyed using cryptographic wiping techniques before the closure of our servers is finalized.
Is Trino Casino use automated decision-making for payments?
We use a limited automated profiling system to flag possible fraud or bonus abuse https://trinoo.de/legal-and-affiliates/. If the system blocks a withdrawal, we’re required by law to involve a human. Our financial risk team manually checks every flagged transaction before we tell you the final decision. You can challenge that decision, give your side, and ask for a full manual review by our risk management specialists.
How do I obtain a complete record of my stored data?
Contact us from the address associated with your account to our Data Protection Officer, place “SAR” in the subject line. We’ll authenticate your identity with a two‑factor step. Subsequently, we gather your data from all systems—chat logs, game history, identity documents—and generate a digitally signed PDF and a machine‑readable JSON file, which you’ll receive within one calendar month.