At hier mehr erfahren, privacy is a fundamental right, and we strive to protecting the personal data of every user who visits lalabet.at from Austria. This Privacy Policy outlines how we collect, handle, retain, and transfer your data when you visit the site, register, utilize our gaming offerings, or participate in the affiliate programme. We follow the General Data Protection Regulation (EU) 2016/679, the Austrian Data Protection Act (DSG), and all relevant national legislation. Our approach is built on openness, equity, and responsibility. We aim to inform you what data we collect, why we need it, what we process it for, and how you can maintain control of it at every step. This document also functions as a comprehensive guide for affiliate partners, detailing how their data is managed within the LalaBet Casino affiliate programme. By engaging with our offerings, you confirm that you have perused and accepted this policy.
Recognizing Our Data Protection Commitment
Privacy at LalaBet Casino is not an afterthought. It shapes every structure, process, and agreement we uphold. Our confidentiality framework meets the standards set by Austrian regulators and the European Data Protection Board. Our Data Protection Officer supervises all processing activities and can answer any questions you have about your rights at any time. We review our procedures on a consistent schedule, run data protection impact assessments, and train our staff so personal data is managed with care. The same rigorous controls apply to our affiliate programme. We are clear about the data we collect and the objectives for which we use it, and we never sell your personal information to third parties. Our aim is to create a safe, trustworthy environment where you can experience our entertainment options without endangering your privacy.
Cross-Border Transfers and Protections
As an online casino working in a global environment, some of our service providers and group companies may be situated outside the European Economic Area. When we send personal data to countries without an adequacy decision from the European Commission, we establish appropriate safeguards to ensure an equivalent level of protection. These safeguards include standard contractual clauses approved by the European Commission, binding corporate rules, and, where applicable, additional technical and organizational measures. We carry out transfer impact assessments to verify that the law and practices of the destination country do not weaken the safeguards we apply. For Austrian users, this means your data remains protected by the same rigorous standards required by the GDPR, no matter where it is processed. We are open about the locations of our key processors and will give you more details about the specific safeguards applied to any particular transfer upon request.
Record Keeping and Safeguards
We retain your personal data only for as long as required to meet the purposes for which it was obtained, or as required by Austrian law. Account data is typically kept for the length of your relationship with us and for up to ten years after account closure to meet anti-money laundering and tax retention obligations. Once the retention period ends, we permanently erase or anonymize your data. To secure your information, we have established technical and organizational security controls. These include encryption of data in transit and at rest, strict access controls based on the principle of least privilege, regular penetration testing, and continuous surveillance of our systems for suspicious behavior. Our staff undergo ongoing privacy and security instruction, and we uphold a tested incident response plan. If a personal data breach poses a danger to your rights and freedoms, we will alert the Austrian Data Protection Authority without undue hesitation and, where required, advise you directly.
Groups of Personal Data We Obtain
To deliver our services and meet our legal requirements, we obtain several categories of personal data. We obtain this information straight from you, as you interact as you interact with our website, and in some cases from trusted third parties. We obtain only the data needed for the goals described in this policy. These categories include:
- Identification and contact data: full name, date of birth, home address, email address, and phone number.
- Account and financial data: username, password, transaction history, deposit and withdrawal information, and payment method details.
- Tech and usage data: IP address, browser type, device identifiers, operating system, login times, pages visited, and game session logs.
- Authentication and compliance data: copies of identification documents, proof of address, and self-exclusion or responsible gaming logs.
- Affiliate data: affiliate ID, referral links, traffic sources, commission details, and marketing performance metrics.
We maintain sensitive data to a minimum and never ask for political opinions, religious beliefs, or biometric data beyond what is absolutely necessary for identity verification under Austrian anti-money laundering rules. Our approach ensures the collection limited and focused. All data is managed according to the rule of data minimization.
Enforcing Your Data Subject Rights
Under the GDPR, you possess a set of robust rights that let you govern your personal information. You are entitled to access the data we hold about you and to obtain a copy in a systematic, commonly used format. You can ask us to correct wrong or incomplete information without undue delay. In certain circumstances, you may request that we erase your data, limit its use, or challenge to processing based on valid interests. You also have the right to data portability for information you have given us, and you can withdraw your agreement for advertising or other consent-based processing at any time. To utilize any of these rights, reach our Data Protection Officer at the email address provided in the contact section of our website. We will answer to your inquiry within one month. We will not impose a charge unless the request is clearly baseless or unreasonable. You also have the right to lodge a appeal with the Austrian Data Protection Authority if you consider our processing infringes data protection law.
Disclosing Data to External Partners
We disclose your personal data only with vetted third parties that assist us provide our services, and we do so under strict contractual safeguards. These parties include payment service providers that handle deposits and withdrawals, identity verification and know-your-customer (KYC) providers that assist us meet regulatory requirements, and IT infrastructure and hosting companies that keep our platform secure. We may also share data with our affiliate software platform to track referrals and calculate commissions for affiliate partners. In every case, we restrict the data shared to what is required for the third party to perform its function. We under no circumstances sell your rp-online.de personal data to advertisers, data brokers, or any other commercial entity. We may also need to disclose information to Austrian regulatory bodies, law enforcement agencies, or courts in response to legitimate legal requests. We review each request thoroughly to ensure it is legal and proportionate before we comply.
Purposes for Managing Your Data
We process your personal data for a well-outlined set of purposes, each linked to a specific legal basis. The primary reason is to create and administer your player account, handle deposits and withdrawals, and offer the gaming services you have asked for under our terms and conditions. Without this operation, we could not satisfy our contractual obligations to you. We also use data to enhance our platform, personalize your experience, and dispatch relevant promotional offers if you have given clear consent. Meeting legal obligations is another key objective; we verify your identity, monitor transactions for suspicious activity, and retain records as required by Austrian gambling regulations and anti-money laundering directives. We also manage data to identify and stop fraud, safeguard game integrity, and shield our systems. For the affiliate programme, we use affiliate data to track referrals, determine commissions, and optimize our marketing partnerships.
Legal Grounds for Data Processing
Every processing activity we perform is founded on a sound legal basis under Article 6 of the GDPR. The bases we use most often are the performance of a contract, compliance with a legal obligation, our legitimate interests, and your consent. When you open an account, processing your identity and financial data is necessary to perform the contract between you and LalaBet Casino. Identity verification and transaction monitoring are carried out to comply with Austrian anti-money laundering laws and the conditions of our gambling licence. We may process usage data to improve our services based on legitimate interest, after a balancing test to ensure your rights are not overridden. For marketing communications and certain cookies, we base on your freely given consent, which you can revoke at any time. When we process affiliate data for programme management, we usually depend on contractual necessity and legitimate interest, and we ensure the processing is proportionate and does not infringe the rights of the data subjects involved.
Data Processing within the Affiliate Programme
Our affiliate programme is an essential component of the LalaBet Casino ecosystem, and we enforce the same privacy standards for affiliates as we apply to players. When you join the affiliate programme, we gather the personal data you submit during sign-up, such as your name, contact details, payment information, and tax identification number. We also automatically collect data regarding traffic produced through your affiliate links, like click-through rates, registrations, and player activity metrics. This information is used only to manage the affiliate relationship, calculate and pay commissions, and improve our marketing efforts. We do not share your individual affiliate data with fellow affiliates or third parties for purposes unrelated to the programme. You retain the same data subject rights as any other individual, such as the right to access, correct, and delete your information, subject to our legal retention obligations. We have signed data processing agreements with our affiliate platform providers to ensure your data is processed lawfully and securely at all times.