At Trino Casino, we manage trinoo trinoo.de.de and we take protecting the personal data of our German players seriously. As a licensed entertainment platform, we’ve established our operations to meet the strict standards of the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG). This document clarifies exactly how we gather, store, handle, and secure your information when you use our website, engage in games, or communicate with our affiliate systems. We hold transparency is essential for a trusting relationship. By presenting our data handling practices clearly, we aim you to be confident that your sensitive financial details and personal identifiers remain in a secure digital environment, controlled by a responsible data controller that complies with local laws and jurisdictional boundaries.
1. Identifikace správce údajů a právní základ zpracování
We act as the data controller for all personal details collected through Trino Casino at trinoo.de, which is customized for German users. Our legal department is based in a registered office within the European Economic Area, so we are fully subject to GDPR enforcement. When we process your data, we rely on six defined lawful bases. Typically, we process your data to satisfy our contractual commitments—including placing bets, processing withdrawals, and keeping your account active. We also employ legitimate interest for analytics and security actions, including fraud detection algorithms and network integrity checks, as long as these do not outweigh your fundamental rights and freedoms. Where the law demands it, especially under anti-money laundering rules and German gambling ordinances, processing happens because of a legal obligation. For marketing communications, including our affiliate program, we depend on your explicit consent, which you can revoke at any time without affecting the core services we offer.
4. Data Preservation Plans and De-identification Methods
We never hold your personal data indefinitely. We observe a strict storage limitation principle. Active customer accounts contain data for the duration of the business relationship, from the moment you register until you formally close the account. After account closure, a holding period starts, driven mostly by German tax legislation and anti-money laundering rules. Transactional logs, identification documents collected under Know Your Customer protocols, and wagering history are securely archived for ten years from the end of the calendar year of the last transaction. Once that statutory retention window concludes, we permanently destroy or irreversibly anonymize the records so re-identification becomes technically impossible. Web server log data that contains IP addresses gets truncated after a strict thirty‑day cycle to reduce security risks. For accounts that go dormant—no activity but not closed—we send a proactive reminder before the dormancy threshold, so we can ask for renewed consent or start the deletion process, always in line with the storage limitation principle.
2. Types of Personal Data Gathered When Creating an Account and Gaming
To provide a smooth entertainment experience that meets German regulations, we gather a few certain categories of personal data, just what is necessary. During account creation, we request identification details: your legal first and last name, residential address with postal code, verified email address, and date of birth to make sure you fulfill the strict age minimum set by German regulators. When you commence playing, we process financial transaction data—deposit amounts, withdrawal methods, partial payment card numbers encrypted with TLS, and e-wallet identifiers. Our systems automatically log technical device data like your IP address, which we restrict by location to confirm you’re in a permitted location, along with browser fingerprint hashes and operating system specs. We also record usage patterns and game session logs, recording bet history and time spent playing, so we can satisfy our responsible gaming obligations. We do not collect special categories of sensitive data unless you voluntarily give that information during a responsible gaming self-assessment or a support inquiry.
6. Exercising Your own Entitlements Pursuant to Germany’s and European Union Legislation
For residents of Germany, you are entitled to a collection of prerogatives that we keep easy to exercise. You can submit a data access request at your convenience. We are then required to ascertain whether we store your data and supply you with a duplicate in a systematic, widely adopted, machine‑readable format within 30 days. The right to amendment lets you update obsolete or inaccurate profile information without waiting, which is essential for seamless payment handling. In some cases, you can demand a restriction of processing, particularly if you contest the precision of data while we check it. The right to deletion, often called the “right to be forgotten,” is applicable when the data has become unnecessary for the primary purpose, though statutory retention duties may temporarily supersede this request. You also have the right to data transfer for data supplied under authorization or agreement, so you may transfer your usage history to a different provider. You have an total prerogative to refuse direct marketing, and you can object to data handling based on lawful interests, which we’ll evaluate against our justifiable bases. Complaints can be filed straight with the data oversight body of your German state if you think a violation has taken place.
3. Particular Processing Activities Pertaining to the Affiliate Programme
Our affiliate network, reachable via our legal and affiliates hub, serves as a separate data processing area. We act as a joint controller together with our marketing partners. When a German webmaster or content creator registers for our partner program, we gather business details like tax identification numbers, bank account information for paying commissions, and traffic source analytics. Our tracking mechanism uses first‑party cookies dropped via a unique affiliate link, which lets us attribute referred traffic to the correct partner account without capturing the browsing history of unregistered visitors. We handle referred player data in a pseudonymized format for commission calculation, so the affiliate views aggregated performance numbers rather than individual player identities. We examine player activity logs against traffic sources to catch bonus abuse or fake incentivized traffic; this is founded on our contractual and legitimate business interests. We have a strict affiliate code of conduct that prohibits partners from targeting self-excluded individuals or using unauthorized direct marketing that could jeopardize the privacy expectations of the German audience.
7. Cookie Administration and Tracking Tools for Regulatory Compliance
Our website employs various digital markers, and our consent management platform makes sure that no non-essential trackers activate until a German user gives active consent through our detailed settings panel. Required session cookies, which do not save personal information but maintain your gaming session and security credentials functioning, are free from consent requirements under the ePrivacy Directive as implemented in German law. For persistent analytics and affiliate attribution cookies, we use server-side tracking where possible to minimize frontend exposure. Our affiliate tracking code functions on a first‑party context model to circumvent current browser restrictions, enabling correct tracking without aggressive tracking scripts that are banned under German digital regulations. We’ve grouped all scripts with comprehensive descriptions of their intent, timeframe, and the external vendors included, so you can modify your preferences whenever you like. Declining advertising cookies does not affect the operation of the game lobby or payment gateways. That shows our privacy-first approach: basic services stay completely available regardless of permission decisions you choose.
5. Cross-border Movements and Technological Protection Measures
Our main data processing systems reside in safe data centers in the European Union, but at times we must utilize sub-processors in other countries. In those specific cases, we assure the identical degree of safeguarding by using Standard Contractual Clauses endorsed by the European Commission, combined with a thorough Transfer Impact Assessment. To safeguard your financial data from unapproved access during transfer, we implement Transport Layer Security (TLS 1.3) encryption across all connection points, blocking obsolete cipher suites. At rest, personal data inside our managed database clusters is protected by AES‑256 encryption, and access to decryption keys is limited to a isolated privileged access management system. We perform continuous vulnerability scans, required penetration tests, and rigorous logical access controls so solely the individuals who need it can see your data. We employ a dedicated Data Protection Officer you can contact through our platform, and we keep an incident response plan that requires us to inform the relevant German supervisory authority within 72 hours if a personal data breach could pose your rights at risk.
FAQ
In what way does Trino Casino verify my age in line with German regulations?
We use a multi-layered system: automatic checks against national databases and human document review. When you create an account, you must provide your national ID card or passport through an encrypted portal. Our compliance team cross‑references this with the Schufa identity service to confirm legal age. If something is inconsistent, we briefly restrict the account until a video identification call with a certified agent can clarify the situation, all in line with the German Interstate Treaty on Gambling.
Can my personal data be disclosed with the affiliate who brought me?
No. Our affiliate programme employs a strict aggregation firewall. We never disclose your name, contact details, or payment records with the referring affiliate. The partner only views a pseudonymized dashboard with confirmed registration counts and a statistical summary of net gaming revenue. Our affiliate agreements expressly prohibit them from seeking to identify individual players. This maintains your gameplay completely separate from the marketing channel that directed you to Trino Casino.
How can permanently cancel my marketing consent?
Go to “Communication Settings” in your account dashboard and turn off promotional channels. Every marketing email we send has a one‑click unsubscribe link at the bottom that works right away. To withdraw consent for postal mail or SMS, contact our Data Protection Officer through the support ticket system. We’ll stop direct marketing within at most 48 hours after receiving your request.
What happens to my data if Trino Casino ceases operations?
If business ever stops, we are legally required to notify the competent German data protection authority and all active users in advance. Mandatory transactional logs and identification records will be securely transferred to a certified archival service or handed over to the responsible regulatory body for as long as the law demands. Any data that isn’t mandatory gets securely destroyed using cryptographic wiping techniques before the closure of our servers is finalized.
Will Trino Casino use automated decision-making for payments?
We use a limited automated profiling system to flag possible fraud or bonus https://www.abendblatt.de/niedersachsen/article406874698/jackpot-geknackt-und-fast-58-millionen-euro-gewonnen.html abuse. If the system blocks a withdrawal, we’re required by law to involve a human. Our financial risk team manually checks every flagged transaction before we tell you the final decision. You can challenge that decision, give your side, and ask for a full manual review by our risk management specialists.
What is the process to receive a complete record of my stored data?
Email us from the address linked to your account to our Data Protection Officer, put “SAR” in the subject line. We’ll confirm your identity with a two‑factor process. Subsequently, we compile your data from all systems—chat logs, game history, identity documents—and prepare a digitally signed PDF and a machine‑readable JSON file, that you will get within one calendar month.