At LalaBet Casino, data protection is a fundamental right, and we strive to protecting the private data of every user who visits lalabet https://lalabet.at/legal-and-affiliates/.at from Austria. This Privacy Policy describes how we gather, process, keep, and disclose your data when you browse the website, register, utilize our gaming offerings, or join the affiliate programme. We comply with the General Data Protection Regulation (EU) 2016/679, the Austrian Data Protection Act (DSG), and all relevant national legislation. Our strategy is based on clarity, equity, and liability. We aim to inform you what data we gather, why we request it, what we use it for, and how you can retain oversight of it at every phase. This document also functions as a detailed resource for affiliate partners, detailing how their data is managed within the LalaBet Casino affiliate programme. By accessing our platform, you confirm that you have reviewed and comprehended this policy.

Information Handling for the Affiliate Programme

Our affiliate programme is a key part of the LalaBet Casino ecosystem, and we maintain the same privacy standards for affiliates as we extend to players. When you sign up for the affiliate programme, we collect the personal data you submit during sign-up, such as your name, contact details, payment information, and tax identification number. We additionally automatically capture data about traffic generated through your affiliate links, such as click-through rates, registrations, and player activity metrics. These details is employed exclusively to manage the affiliate relationship, calculate and pay commissions, and improve our marketing efforts. We do not share your individual affiliate data with fellow affiliates or outside parties for purposes unrelated to the programme. You maintain the same data subject rights as any other user, such as the right to access, correct, and delete your information, in accordance with our legal retention obligations. We have concluded data processing agreements with our affiliate system providers to ensure your data is handled lawfully and safely at all times.

Recognizing Our Confidentiality Commitment

Privacy at LalaBet Casino is not an afterthought. It shapes every framework, process, and agreement we sustain. Our privacy framework meets the requirements set by Austrian regulators and the European Data Protection Board. Our Data Protection Officer oversees all processing activities and can respond to any questions you have about your rights at any time. We review our procedures on a regular schedule, run data protection impact evaluations, and train our staff so personal data is treated with care. The same stringent controls apply to our affiliate programme. We are clear about the data we collect and the reasons for which we use it, and we never sell your personal information to third parties. Our objective is to create a safe, trustworthy setting where you can enjoy our entertainment options without jeopardizing your privacy.

Global Transfers and Measures

As an online casino working in a global environment, some of our service providers and group companies may be located outside the European Economic Area. When we transfer personal data to countries without an adequacy decision from the European Commission, we put in place appropriate safeguards to guarantee an equivalent level of protection. These safeguards include standard contractual clauses approved by the European Commission, binding corporate rules, and, where applicable, additional technical and organizational measures. We perform transfer impact assessments to confirm that the law and practices of the destination country do not reduce the safeguards we apply. For Austrian users, this means your data remains protected by the same rigorous standards required by the GDPR, no matter where it is processed. We are transparent about the locations of our key processors and will give you more details about the specific safeguards applied to any particular transfer upon request.

Data Storage and Safeguards

We retain your personal data only for as long as needed to fulfil the purposes for which it was obtained, or as required by Austrian law. Account data is typically kept for the duration of your relationship with us and for up to ten years after account closure to comply with anti-money laundering and tax retention requirements. Once the retention period expires, we permanently erase or anonymize your data. To protect your information, we have put in place technical and organizational security controls. These encompass swissinfo.ch encryption of data in transit and at rest, strict access controls based on the principle of least privilege, regular penetration testing, and continuous observation of our systems for suspicious activity. Our staff get ongoing privacy and security training, and we maintain a tested incident response plan. If a personal data breach poses a threat to your rights and freedoms, we will notify the Austrian Data Protection Authority without undue hesitation and, where required, notify you directly.

Groups of Personal Data We Obtain

To offer our services and meet our legal obligations, we gather several categories of personal data. We obtain this information directly from you, through your use as you visit our website, and in some cases from vetted third parties. We collect only the data required for the purposes described in this policy. These categories include:

• Identity and contact data: full name, date of birth, home address, email address, and phone number.
• Account-related and financial data: username, password, transaction history, deposit and withdrawal details, and payment method information.
• System and usage data: IP address, browser type, device identifiers, operating system, login times, pages visited, and game session logs.
• Validation and compliance data: copies of identification documents, proof of address, and self-exclusion or responsible gaming records.
• Affiliate data: affiliate ID, referral links, traffic sources, commission information, and marketing performance metrics.

We hold sensitive data to a minimum and never request political opinions, religious beliefs, or biometric data beyond what is essential for identity verification under Austrian anti-money laundering rules. Our approach maintains the collection constrained and focused. All data is handled according to the concept of data minimization.

Disclosing Data to External Partners

We share your personal data only with trusted third parties that enable us deliver our services, and we do so under rigorous contractual safeguards. These parties include payment service providers that process deposits and withdrawals, identity verification and know-your-customer (KYC) providers that support us meet regulatory requirements, and IT infrastructure and hosting companies that keep our platform secure. We may also share data with our affiliate software platform to monitor referrals and calculate commissions for affiliate partners. In every case, we confine the data shared to what is essential for the third party to fulfill its function. We never sell your personal data to advertisers, data brokers, or any other commercial entity. We may also be required to disclose information to Austrian regulatory bodies, law enforcement agencies, or courts in response to valid legal requests. We review each request carefully to ensure it is lawful and proportionate before we accede.

Using Your Data Subject Rights

Under the GDPR, you have a set of robust rights that let you manage your personal information. You have the right to access the data we keep about you and to obtain a copy in a structured, commonly used format. You can request us to correct incorrect or incomplete information without undue delay. In particular circumstances, you may seek that we delete your data, constrain its processing, or object to processing based on legitimate interests. You also have the right to data transferability for information you have given us, and you can revoke your permission for promotional or other approval-based processing at any time. To utilize any of these rights, reach our Data Protection Officer at the email address provided in the contact section of our website. We will reply to your request within one month. We will not charge a fee unless the request is manifestly baseless or excessive. You also have the right to submit a grievance with the Austrian Data Protection Authority if you think our processing violates data protection law.

Legal Foundations for Data Management

Each processing activity we undertake is based on a valid legal basis under Article 6 of the GDPR. The bases we depend on most often are the performance of a contract, compliance with a legal obligation, our legitimate interests, and your consent. When you open an account, processing your identity and financial data is necessary to perform the contract between you and LalaBet Casino. Identity verification and transaction monitoring are performed to comply with Austrian anti-money laundering laws and the conditions of our gambling licence. We may process usage data to improve our services based on legitimate interest, after a balancing test to ensure your rights are not overridden. For marketing communications and certain cookies, we rely on your freely given consent, which you can withdraw at any time. When we process affiliate data for programme management, we usually depend on contractual necessity and legitimate interest, and we guarantee the processing is proportionate and does not infringe the rights of the data subjects involved.

Reasons for Processing Your Information

We handle your personal data for a clearly defined set of goals, each connected to a specific legal basis. The primary reason is to establish and manage your player account, carry out deposits and withdrawals, and deliver the gaming services you have requested under our terms and conditions. Without this handling, we could not meet our contractual ooe.orf.at obligations to you. We also utilize data to upgrade our platform, customize your experience, and transmit relevant promotional offers if you have given clear consent. Fulfilling legal obligations is another key purpose; we authenticate your identity, supervise transactions for suspicious activity, and keep records as required by Austrian gambling regulations and anti-money laundering directives. We also process data to detect and stop fraud, safeguard game integrity, and fortify our systems. For the affiliate programme, we utilize affiliate data to follow referrals, calculate commissions, and optimize our marketing partnerships.