At Trino Casino, we operate trinoo.de and we take protecting the personal data of our German players seriously. As a licensed entertainment platform, we’ve built our operations to fulfill the strict standards of the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG). This document clarifies exactly how we collect, retain, process, and secure your information when you access our website, engage in games, or communicate with our affiliate systems. We consider transparency is vital for a trusting relationship. By laying out our data handling practices clearly, we intend you to remain confident that your sensitive financial details and personal identifiers stay in a secure digital environment, handled by a responsible data controller that respects local laws and jurisdictional boundaries.
1. Určení správce údajů a právní důvod zpracování
We are the data controller for all personal information collected through Trino Casino at trinoo.de, which is tailored for users in Germany. Our legal team operates from a registered office inside the European Economic Area, making us fully bound by GDPR enforcement. When we process your data, we rely on six defined lawful bases. In most cases, we process your data to meet our contractual duties—such as accepting bets, handling withdrawals, and maintaining your account. We also rely on legitimate interest for analytics and security purposes, like fraud detection algorithms and network integrity checks, provided these do not override your fundamental rights and freedoms. When required by law, particularly under anti-money laundering regulations and German gambling ordinances, processing occurs due to a legal obligation. For marketing communications, including our affiliate programme, we rely on your explicit consent, which you can withdraw at any time without any impact on the core services we provide.
6. Exercising Your own Rights Pursuant to Germany’s and European Union Law
For residents of Germany, you possess a collection of prerogatives that we have made straightforward to enforce. You may file a data access request at any moment. We then have to confirm whether we hold your personal details and give you a version in a structured, widely adopted, machine‑readable form within 30 days. The right to correction enables you to fix outdated or incorrect profile information without delay, which is crucial for seamless payment operations. Under certain circumstances, you are entitled to a restriction of data handling, particularly if you contest the accuracy of data while we check it. The right to erasure, frequently referred to as the “right to be forgotten,” is applicable when the data is no longer required for the initial objective, though statutory retention duties may temporarily supersede this demand. You additionally possess the right to data transfer for information furnished under consent or agreement, so you may transfer your transaction record to a different provider. You enjoy an absolute entitlement to oppose direct marketing, and you can object to operations based on legitimate interests, which we shall weigh against our legitimate compelling grounds. Grievances can be filed immediately with the data oversight body of your German federal state if you suspect a violation has taken place.
2. Groups of Personal Data Gathered at Sign-Up and Playing
To offer a smooth entertainment experience that meets German regulations, we obtain a few specific types of personal data, just what is necessary. During account creation, we ask for identification details: your legal first and last name, residential address with postal code, verified email address, and date of birth to make sure you satisfy the strict age minimum set by German regulators. When you commence playing, we process financial transaction data—deposit amounts, withdrawal methods, partial payment card numbers encrypted with TLS, and e-wallet identifiers. Our systems automatically log technical device data like your IP address, which we geographically filter to verify you’re in a permitted location, along with browser fingerprint hashes and operating system specs. We also monitor usage patterns and game session logs, documenting bet history and time spent playing, so we can meet our responsible gaming obligations. We do not obtain special categories of sensitive data unless you freely give that information during a responsible gaming self-assessment or a support inquiry.
3. Particular Processing Activities Connected with the Affiliate Programme
Our affiliate network, casino trino, accessible through our legal and affiliates hub, serves as a separate data processing area. We function as a joint controller together with our marketing partners. When a German webmaster or content creator registers for our partner program, we gather business details like tax identification numbers, bank account information for paying commissions, and traffic source analytics. Our tracking mechanism uses first‑party cookies dropped via a unique affiliate link, which allows us attribute referred traffic to the correct partner account without capturing the browsing history of unregistered visitors. We handle referred player data in a pseudonymized format for commission calculation, so the affiliate views aggregated performance numbers rather than individual player identities. We review player activity logs against traffic sources to catch bonus abuse or fake incentivized traffic; this is grounded in our contractual and legitimate business interests. We have a strict affiliate code of conduct that prevents partners from targeting self-excluded individuals or using unauthorized direct marketing that could jeopardize the privacy expectations of the German audience.
7. Cookie Administration and Tracking Tools for Regulatory Compliance
Our website uses various digital markers, and our consent management platform ensures that no non-essential tracking tools fire until a German visitor gives active consent through our detailed preference center. Required session cookies, which do not store personal information but keep your gaming session and security keys working, are exempt from permission requirements under the ePrivacy Directive as enforced in German regulations. For continuous analytics and affiliate attribution cookies, we implement server-side tracking where practicable to limit frontend exposure. Our partner tracking pixel functions on a direct context model to work around contemporary browser limitations, enabling accurate commissioning without intrusive fingerprinting scripts that are prohibited under German digital law. We’ve classified all scripts with detailed descriptions of their purpose, timeframe, and the third‑party vendors engaged, so you can modify your settings whenever you like. Refusing advertising cookies doesn’t harm the functionality of the gaming lobby or payment gateways. That reflects our privacy‑by‑design approach: essential services remain completely available regardless of approval selections you select.
4. Data Preservation Plans and Anonymization Techniques
We do not retain your personal data indefinitely. We adhere to a strict storage limitation principle. Active customer accounts contain data for the duration of the business relationship, from the moment you register until you formally close the account. After account closure, a holding period kicks in, driven mostly by German tax legislation and anti-money laundering rules. Transactional logs, identification documents collected under Know Your Customer protocols, and wagering history are securely archived for ten years from the end of the calendar year of the last transaction. Once that statutory retention window expires, we permanently destroy or irreversibly anonymize the records so re-identification becomes technically impossible. Web server log data that contains IP addresses gets truncated after a strict thirty‑day cycle to reduce security risks. For accounts that go dormant—no activity but not closed—we send a proactive reminder before the dormancy threshold, so we can ask for renewed consent or start the deletion process, always in line with the storage limitation principle.
5. International Movements and Technological Protection Safeguards
Our principal data processing systems are located in protected data centers in the European Union, but at times we need to use sub-processors in various countries. In those limited cases, we assure the equivalent standard of protection by employing Standard Contractual Clauses endorsed by the European Commission, combined with a comprehensive Transfer Impact Assessment. To secure your financial data from illegitimate access during communication, we apply Transport Layer Security (TLS 1.3) encryption across all endpoints, refusing outdated cipher suites. At rest, personal data within our managed database clusters is shielded by AES‑256 encryption, and access to decryption keys is restricted to a segregated privileged access management system. We conduct regular vulnerability scans, compulsory penetration tests, and rigorous logical access controls so only the people who need it can access your data. We have a appointed Data Protection Officer you can reach through our platform, and we keep an incident response plan that mandates us to alert the pertinent German supervisory authority within 72 hours if a personal data breach could pose your rights at risk.
Frequently Asked Questions
How can Trino Casino confirm my age in line with German regulations?
We use a comprehensive system: automatic checks against national databases and human document review. When you register, you must upload your national ID card or passport through an encrypted portal. Our compliance team cross‑references this with the Schufa identity service to establish legal age. If something doesn’t match, we briefly restrict the account until a video identification call with a certified agent can resolve the issue, all in line with the German Interstate Treaty on Gambling.
Can my personal data be disclosed with the affiliate who referred me?
No. Our affiliate programme operates with a strict aggregation firewall. We never share your name, contact details, or payment records with the referring affiliate. The partner only accesses a pseudonymized dashboard with confirmed registration counts and a statistical summary of net gaming revenue. Our affiliate agreements expressly prohibit them from attempting to identify individual players. This maintains your gameplay completely separate from the marketing channel that led you to Trino Casino.
In what way can I permanently withdraw my marketing consent?
Go to “Communication Settings” in your account dashboard and turn off promotional channels. Every marketing email we send has a one‑click unsubscribe link at the bottom that works right away. To withdraw consent for postal mail or SMS, contact our Data Protection Officer through the support ticket system. We’ll stop direct marketing within at most 48 hours after receiving your request.
What transpires to my data if Trino Casino ceases operations?
If business ever stops, we are legally required to notify the competent German data protection authority and all active users in advance. Mandatory transactional logs and identification records will be securely transferred to a certified archival service or handed over to the responsible regulatory body for as long as the law demands. Any data that isn’t mandatory gets securely destroyed using cryptographic wiping techniques before the closure of our servers is finalized.
Is Trino Casino use automated decision-making for payments?
We use a limited automated profiling system to flag possible fraud or bonus abuse. If the system blocks a withdrawal, we’re required by law to involve a human. Our financial risk team manually checks every flagged transaction before we tell you the final decision. You can challenge that decision, give your side, and ask for a full manual review by our risk management specialists.
How can I get a complete record of my stored data?
Contact us from the address associated with your account to our Data Protection Officer, put “SAR” in the subject line. We’ll confirm your identity with a two‑factor process. After that, we gather your data from all systems—chat logs, game history, identity documents—and create a digitally signed PDF and a machine‑readable JSON file, that you will get within one calendar month.