At Trino Casino, we run trinoo https://trinoo.de/legal-and-affiliates/.de and we assume protecting the personal data of our German players seriously. As a licensed entertainment platform, we’ve built our operations to satisfy the strict standards of the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG). This document explains exactly how we collect, store, manage, and safeguard your information when you access our website, participate in games, or communicate with our affiliate systems. We believe transparency is essential for a trusting relationship. By laying out our data handling practices clearly, we want you to remain confident that your sensitive financial details and personal identifiers remain in a secure digital environment, controlled by a responsible data controller that adheres to local laws and jurisdictional boundaries.
1. Určení správce údajů a právní důvod zpracování
We are the data controller for all personal information collected through Trino Casino at trinoo.de, which is tailored for users in Germany. Our legal team operates from a registered office inside the European Economic Area, making us fully bound by GDPR enforcement. When we process your data, we rely on six defined lawful bases. In most cases, we process your data to meet our contractual duties—such as accepting bets, handling withdrawals, and maintaining your account. We also use legitimate interest for analytics and security measures, such as fraud detection algorithms and network integrity checks, as long as these don’t override your fundamental rights and freedoms. Where legislation requires it, especially under anti-money laundering laws and German gambling ordinances, processing is carried out due to a legal duty. For marketing communications, including our affiliate programme, we rely on your explicit consent, which you can withdraw at any time without any impact on the core services we provide.
2. Groups of Player Details Obtained at Sign-Up and Gaming
To offer a flawless entertainment experience that satisfies German regulations, we gather a few certain kinds of personal data, just what is necessary. During account creation, we request identification details: your legal first and last name, residential address with postal code, verified email address, and date of birth to ensure you satisfy the strict age minimum established by German regulators. When you commence playing, we handle financial transaction data—deposit amounts, withdrawal methods, partial payment card numbers encrypted with TLS, and e-wallet identifiers. Our systems automatically log technical device data like your IP address, which we geographically filter to verify you’re in a permitted location, along with browser fingerprint hashes and operating system specs. We also record usage patterns and game session logs, logging bet history and time spent playing, so we can satisfy our responsible gaming obligations. We do not collect special categories of sensitive data unless you voluntarily give that information during a responsible gaming self-assessment or a support inquiry.
Common Questions
How can Trino Casino check my age in line with German regulations?
We employ a comprehensive system: automatic checks against national databases and manual document review. When you create an account, you must provide your national ID card or passport through an encrypted portal. Our compliance team checks this with the Schufa identity service to confirm legal age. If something does not align, we provisionally restrict the account until a video identification call with a certified agent can clarify the situation, all in line with the German Interstate Treaty on Gambling.
Can my personal data be shared with the affiliate who referred me?
No. Our affiliate programme uses a strict aggregation firewall. We never share your name, contact details, or payment records with the referring affiliate. The partner only accesses a pseudonymized dashboard with confirmed registration counts and a statistical summary of net gaming revenue. Our affiliate agreements expressly prohibit them from trying to identify individual players. This keeps your gameplay completely separate from the marketing channel that directed you to Trino Casino.
How do I permanently revoke my marketing consent?
Go to “Communication Settings” in your account dashboard and turn off promotional channels. Every marketing email we send has a one‑click unsubscribe link at the bottom that works right away. To withdraw consent for postal mail or SMS, contact our Data Protection Officer through the support ticket system. We’ll stop direct marketing within at most 48 hours after receiving your request.
What occurs to my data if Trino Casino ceases operations?
If business ever stops, we are legally required to notify the competent German data protection authority and all active users in advance. Mandatory transactional logs and identification records will be securely transferred to a certified archival service or handed over to the responsible regulatory body for as long as the law demands. Any data that isn’t mandatory gets securely destroyed using cryptographic wiping techniques before the closure of our servers is finalized.
Does Trino Casino use automated decision-making for payments?
We use a limited automated profiling system to flag possible fraud or bonus abuse. If the system blocks a withdrawal, we’re required by law to involve a human. Our financial risk team manually checks every flagged transaction before we tell you the final decision. You can challenge that decision, give your side, and ask for a full manual review by our risk management specialists.
How do I obtain a complete record of my stored data?
Contact us from the address associated with your account to our Data Protection Officer, include “SAR” in the subject line. We’ll confirm your identity with a two‑factor verification. After that, we collect your data from all systems—chat logs, game history, identity documents—and create a digitally signed PDF and a machine‑readable JSON file, which will be sent to you within one calendar month.
6. Exercising Your Entitlements According to German and EU Law
If you are a resident of Germany, you possess a collection of prerogatives that we have made easy to exercise. You may file a data access request at your convenience. We must to confirm whether we process your information and supply you with a copy in a organized, standard, machine‑readable format within 30 days. The right to rectification lets you correct obsolete or inaccurate profile data without delay, which is crucial for efficient payment operations. In specific situations, you may request a restriction of processing, particularly if you dispute the precision of data while we check it. The right to removal, frequently referred to as the “right to be forgotten,” takes effect when the data is no longer required for the primary objective, though mandatory storage requirements may momentarily override this petition. You are also granted the right to data transfer for details supplied under agreement or contract, so you may transfer your activity log to a new service. You have an absolute prerogative to refuse direct marketing, and you may oppose to data handling based on lawful interests, which we will assess against our own compelling grounds. Grievances can be lodged immediately with the privacy regulator of your German federal state if you suspect a breach has occurred.
7. Cookie Management and Tracking Tools for Legal Compliance
Our website employs multiple tracking markers, and our consent management platform ensures that no unnecessary trackers trigger until a German visitor gives active consent through our comprehensive preference center. Essential session cookies, which don’t store personal information but maintain your game session and security keys working, are free from approval requirements under the ePrivacy Regulation as applied in German legislation. For ongoing analytics and affiliate attribution cookies, we employ server-side tracking where possible to limit frontend exposure. Our affiliate tracking pixel runs on a direct context model to circumvent modern browser blocking, enabling correct tracking without invasive fingerprinting scripts that are forbidden under German digital law. We’ve classified all scripts with comprehensive descriptions of their function, timeframe, and the third‑party vendors engaged, so you can change your settings whenever you wish. Refusing advertising cookies doesn’t harm the performance of the gaming lobby or payment portals. That demonstrates our data-protection approach: core services remain completely available irrespective of consent choices you select.
5. Global Transfers and System Protection Controls
Our primary data processing systems are located in safe data centers within the European Union, but occasionally we must utilize sub-processors in various countries. In these specific cases, we assure the same degree of safeguarding by implementing Standard Contractual Clauses endorsed by the European Commission, together with a comprehensive Transfer Impact Assessment. To protect your financial data from unauthorized access during transfer, we apply Transport Layer Security (TLS 1.3) encryption across all terminals, rejecting old cipher suites. At rest, personal data inside our managed database clusters is protected by AES‑256 encryption, and access to decryption keys is restricted to a segregated privileged access management system. We run regular vulnerability scans, compulsory penetration tests, and rigorous logical access controls so only the people who must have it can see your data. We have a appointed Data Protection Officer you can contact through our platform, and we have an incident response plan that obligates us to alert the appropriate German supervisory authority within 72 hours if a personal data breach could put your rights at risk.
4. Data Retention Schedules and De-identification Methods
We do not retain your personal data indefinitely. We observe a strict storage limitation principle. Active customer accounts contain data for the duration of the business relationship, from the moment you register until you formally close the account. After account closure, a holding period starts, driven mostly by German tax legislation and anti-money laundering rules. Transactional logs, identification documents collected under Know Your Customer protocols, and wagering history are securely archived for ten years from the end of the calendar year of the last transaction. Once that statutory retention window concludes, we permanently destroy or irreversibly anonymize the records so re-identification becomes technically impossible. Web server log data that contains IP addresses gets truncated after a strict thirty‑day cycle to reduce security risks. For accounts that go dormant—no activity but not closed—we send a proactive reminder before the dormancy threshold, so we can ask for renewed consent or start the deletion process, always in line with the storage limitation principle.
3. Particular Processing Activities Connected with the Affiliate Programme
Our affiliate network, accessible through our legal and affiliates hub, operates as a separate data processing area. We function as a joint controller together with our marketing partners. When a German webmaster or content creator enrolls in our partner program, we gather business details like tax identification numbers, bank account information for paying commissions, and traffic source analytics. Our tracking mechanism employs first‑party cookies dropped via a unique affiliate link, which allows us attribute referred traffic to the correct partner account without capturing the browsing history of unregistered visitors. We handle referred player data in a pseudonymized format for commission calculation, so the affiliate observes aggregated performance numbers rather than individual player identities. We check player activity logs against traffic sources to catch bonus abuse or fake incentivized traffic; this is based on our contractual and legitimate business interests. We have a strict affiliate code of conduct that forbids partners from targeting self-excluded individuals or using unauthorized direct marketing that could compromise the privacy expectations of the German audience.