LalaBet Casino’s Privacy Policy for Austria Users

/in /by

At LalaBet Casino, data protection is a fundamental right, and we’re committed to protecting the personal information of every user who visits lalabet.at from Austria. This Privacy Policy describes how we obtain, manage, store, and disclose your information when you browse the website, sign up, use our gaming services, or join the affiliate programme. We comply with the General Data Protection Regulation (EU) 2016/679, the Austrian Data Protection Act (DSG), and all relevant national legislation. Our strategy is based on openness, fairness, and responsibility. We wish to clarify what data we gather, why we request it, what we process it for, and how you can stay in control of it at every step. This document also functions as a detailed resource for affiliate partners, outlining how their data is managed within the LalaBet Casino affiliate programme. By accessing our platform, you confirm that you have perused and accepted this policy.

Record Keeping and Security Measures

We retain your personal data only for as long as needed to meet the purposes for which it was collected, or as stipulated by Austrian law. Account data is typically maintained for the length of your relationship with us and for up to ten years after account closure to meet anti-money laundering and tax retention duties. Once the retention period ends, we securely delete or anonymize your data. To secure your information, we have put in place technical and organizational security measures. These include encryption of data in transit and at rest, strict access controls based on the principle of least privilege, regular penetration testing, and continuous observation of our systems for suspicious behavior. Our staff undergo ongoing privacy and security training, and we keep a tested incident response plan. If a personal data breach poses a danger to your rights and freedoms, we will alert the Austrian Data Protection Authority without undue hesitation and, where required, notify you directly.

Groups of Personal Data We Collect

To offer our services and meet our legal obligations, we collect several categories of personal data. We collect this information directly from you, through your use as you visit our website, and in some cases from carefully selected third parties. We obtain only the data necessary for the purposes described in this policy. These groups include:

  • Identity and contact data: full name, date of birth, home address, email address, and phone number.
  • Account and financial data: username, password, transaction history, deposit and withdrawal information, and payment method data.
  • Tech and usage data: IP address, browser type, device identifiers, operating system, login times, pages visited, and game session logs.
  • Validation and compliance data: copies of identification documents, proof of address, and self-exclusion or responsible gaming documentation.
  • Partner data: affiliate ID, referral links, traffic sources, commission particulars, and marketing performance metrics.

We keep sensitive data to a minimum and never demand political opinions, religious beliefs, or biometric data beyond what is essential for identity verification under Austrian anti-money laundering rules. Our approach ensures the collection limited and focused. All data is processed according to the principle of data minimization.

Legal Basis for Data Handling

Every processing activity we undertake is founded on a lawful legal basis under Article 6 of the GDPR. The bases we rely on most often are the performance of a contract, compliance with a legal obligation, our legitimate interests, and your consent. When you open an account, processing your identity and financial data is necessary to perform the contract between you and LalaBet Casino affiliate-partnerschaft. Identity verification and transaction monitoring are performed to comply with Austrian anti-money laundering laws and the conditions of our gambling licence. We may process usage data to enhance our services based on legitimate interest, after a balancing test to ensure your rights are not overridden. For marketing communications and certain cookies, we depend on your freely given consent, which you can withdraw at any time. When we process affiliate data for programme management, we usually depend on contractual necessity and legitimate interest, and we guarantee the processing is proportionate and does not infringe the rights of the data subjects involved.

Enforcing Your Personal Data Rights

Under the GDPR, you enjoy a set of robust rights that allow you manage your personal data. You are entitled to access the data we hold about you and to get a duplicate in a systematic, commonly used format. You can request us to correct wrong or partial information without undue delay. In certain circumstances, you may demand that we erase your data, constrain its handling, or object to processing based on valid interests. You also have the right to data portability for information you have given us, and you can revoke your permission for promotional or other permission-based processing at any time. To apply any of these rights, contact our Data Protection Officer at the email address given in the contact section of our website. We will respond to your demand within one month. We will not charge a cost unless the request is clearly unfounded or unreasonable. You also have the right to submit a complaint with the Austrian Data Protection Authority if you believe our processing breaches data protection law.

Disclosing Data to External Partners

We provide your personal data only with trusted third parties that help us deliver our services, and we do so under rigorous contractual safeguards. These entities include payment service providers that manage deposits and withdrawals, identity verification and know-your-customer (KYC) providers that assist us meet regulatory requirements, and IT infrastructure and hosting companies that keep our platform secure. We may also share data with our affiliate software platform to monitor referrals and calculate commissions for affiliate partners. In every case, we restrict the data shared to what is required for the third party to perform its function. We never sell your personal data to advertisers, data brokers, or any other commercial entity. We may also need to disclose information to Austrian regulatory bodies, law enforcement agencies, or courts in response to lawful legal requests. We assess each request diligently to ensure it is legal and proportionate before we accede.

Recognizing Our Confidentiality Commitment

Privacy at LalaBet Casino is not an afterthought. It shapes every framework, process, and partnership we maintain. Our data protection framework meets the requirements set by Austrian regulators and the European Data Protection Board. Our Data Protection Officer oversees all processing activities and can answer any questions you have about your rights at any time. We review our policies on a routine schedule, run data protection impact assessments, and train our staff so personal data is treated with care. The same stringent controls apply to our affiliate programme. We are transparent about the data we collect and the objectives for which we use it, and we never sell your personal information to third parties. Our objective is to create a secure, trustworthy environment where you can appreciate our entertainment options without jeopardizing your privacy.

Global Transfers and Safeguards

As an online casino working in a global environment, some of our service providers and group companies may be based outside the European Economic Area. When we move personal data to countries without an adequacy decision from the European Commission, we put in place appropriate safeguards to guarantee an equivalent level of protection. These safeguards comprise standard contractual clauses approved by the European Commission, binding corporate rules, and, where applicable, additional technical and organizational measures. We perform transfer impact assessments to check that the law and practices of the destination country do not weaken the safeguards we apply. For Austrian users, this signifies your data remains protected by the same rigorous standards required by the GDPR, no matter where it is processed. We are transparent about the locations of our key processors and will give you more details about the specific safeguards applied to any particular transfer upon request.

Purposes for Managing Your Details

We process your personal data for a well-outlined set of purposes, each tied to a specific legal basis. The principal reason is to set up and oversee your player account, carry out deposits and withdrawals, and offer the gaming services you have sought under our terms and conditions. Without this handling, we would not be able to fulfill our contractual obligations to you. We also use data to upgrade our platform, tailor your experience, and dispatch relevant promotional offers if you have given clear consent. Complying with legal obligations is another key purpose; we authenticate your identity, track transactions for suspicious activity, and maintain records as required by Austrian gambling regulations and anti-money laundering directives. We also process data to detect and thwart fraud, safeguard game integrity, and secure our systems. For the affiliate programme, we leverage affiliate data to track referrals, determine commissions, and optimize our marketing partnerships.

Information Handling in the Affiliate Programme

The affiliate programme we run is a key part of the LalaBet Casino ecosystem, and we enforce the same privacy standards to affiliates as we do to players. Upon joining the affiliate programme, we collect the personal data you submit during sign-up, such as your name, contact details, payment information, and tax identification number. We additionally automatically capture data on traffic generated through your affiliate links, like click-through rates, registrations, and player activity metrics. This information is utilised solely to manage the affiliate relationship, calculate and pay commissions, and improve our marketing efforts. We never share your individual affiliate data with third-party affiliates or external parties for purposes unrelated to the programme. You maintain the same data subject rights as any other user, such as the right to access, correct, and delete your information, depending on our legal retention obligations. We have executed data processing agreements with our affiliate system providers to make sure your data is managed lawfully and safely at all times.