At LalaBet Casino, data protection is a basic right, and we strive to protecting the personal data of every user who accesses lalabet.at from Austria. This Privacy Policy describes how we gather, manage, retain, and disclose your details when you browse the website, create an account, engage with our games, or participate in the affiliate programme. We follow the General Data Protection Regulation (EU) 2016/679, the Austrian Data Protection Act (DSG), and all relevant national legislation. Our strategy is based on transparency, integrity, and liability. We want you to know what data we gather, why we need it, what we use it for, and how you can retain oversight of it at every step. This document also functions as a detailed resource for affiliate partners, specifying how their data is managed within the LalaBet Casino affiliate programme. By using our services, you agree that you have reviewed and comprehended this policy.
Information Retention and Security Measures
We retain your personal data only for as long as necessary to meet the purposes for which it was gathered, or as stipulated by Austrian law. Account data is typically maintained for the duration of your relationship with us and for up to ten years after account closure to meet anti-money laundering and tax retention obligations. Once the retention period concludes, we securely delete or anonymize your data. To secure your information, we have implemented technical and organizational security controls. These comprise encryption of data in transit and at rest, strict access controls based on the principle of least privilege, regular penetration testing, and continuous surveillance of our systems for suspicious activity. Our staff receive ongoing privacy and security training, and we maintain a tested incident response plan. If a personal data breach poses a threat to your rights and freedoms, we will notify the Austrian Data Protection Authority without undue postponement and, where required, notify you directly.
Sharing Information with Third Parties
We share your personal data only with trusted third parties that assist us offer our services, and we do so under strict contractual safeguards https://lalabet.at/legal-and-affiliates. These recipients include payment service providers that manage deposits and withdrawals, identity verification and know-your-customer (KYC) providers that assist us meet regulatory requirements, and IT infrastructure and hosting companies that ensure our platform secure. We may also share data with our affiliate software platform to monitor referrals and calculate commissions for affiliate partners. In every case, we limit the data shared to what is required for the third party to perform its function. We do not sell your personal data to advertisers, data brokers, or any other commercial entity. We may also be required to disclose information to Austrian regulatory bodies, law enforcement agencies, or courts in response to valid legal requests. We assess each request carefully to ensure it is valid and proportionate before we respond.
Personal Data Management in the Affiliate Programme
The affiliate programme we run is an essential component of the LalaBet Casino ecosystem, and we apply the same privacy standards towards affiliates as we do to players. When you sign up for the affiliate programme, we obtain the personal data you supply when registering, such as your name, contact details, payment information, and tax identification number. We additionally automatically capture data regarding traffic produced through your affiliate links, like click-through rates, registrations, and player activity metrics. This data is employed exclusively to manage the affiliate relationship, calculate and pay commissions, and improve our marketing efforts. We refrain from sharing your individual affiliate data with fellow affiliates or outside parties for purposes unrelated to the programme. You maintain the same data subject rights as any other individual, encompassing the right to access, correct, and delete your information, subject to our legal retention obligations. We have concluded data processing agreements with our affiliate system providers to guarantee your data is handled lawfully and safely at all times.
Global Transfers and Measures
As an online casino operating in a global environment, some of our service providers and group companies may be located outside the European Economic Area. When we transfer personal data to countries without an adequacy decision from the European Commission, we implement appropriate safeguards to maintain an equivalent level of protection. These safeguards cover standard contractual clauses approved by the European Commission, binding corporate rules, and, where applicable, additional technical and organizational measures. We conduct transfer impact assessments to confirm that the law and practices of the destination country do not undermine the safeguards we apply. For Austrian users, this implies your data remains protected by the same rigorous standards required by the GDPR, no matter where it is processed. We are open about the locations of our key processors and will give you more details about the specific safeguards applied to any particular transfer upon request.
Objectives for Handling Your Details
We process your personal data for a clearly defined set of objectives, each tied to a specific legal basis. The primary reason is to establish and oversee your player account, process deposits and withdrawals, and provide the gaming services you have sought under our terms and conditions. Without this handling, we could not fulfill our contractual obligations to you. We also use data to enhance our platform, customize your experience, and dispatch relevant promotional offers if you have given clear consent. Meeting legal obligations is another key purpose; we confirm your identity, track transactions for suspicious activity, and keep records as required by Austrian gambling regulations and anti-money laundering directives. We also handle data to identify and stop fraud, protect game integrity, and shield our systems. For the affiliate programme, we utilize affiliate data to monitor referrals, calculate commissions, and optimize our marketing partnerships.
Legal Grounds for Data Handling
Any processing activity we perform rests on a valid legal basis under Article 6 of the GDPR. The bases we depend on most often are the performance of a contract, compliance with a legal obligation, our legitimate interests, and your consent. When you create an account, processing your identity and financial data is necessary to perform the contract between you and LalaBet Casino. Identity verification and transaction monitoring are performed to comply with Austrian anti-money laundering laws and the conditions of our gambling licence. We may process usage data to enhance our services based on legitimate interest, after a balancing test to make sure your rights are not overridden. For marketing communications and certain cookies, we base on your freely given consent, which you can cancel at any time. When we process affiliate data for programme management, we usually base on contractual necessity and legitimate interest, and we make sure the processing is proportionate and does not infringe the rights of the data subjects involved.
Groups of Personal Data We Collect
To offer our services and meet our legal obligations, we gather several groups of personal data. We obtain this information directly from you, as you interact as you visit our website, and in some cases from carefully selected third parties. We collect only the data necessary for the objectives described in this policy. These types include:
- Personal and contact data: full name, date of birth, home address, email address, and phone number.
- Account and financial data: username, password, transaction history, deposit and withdrawal particulars, and payment method data.
- Tech and usage data: IP address, browser type, device identifiers, operating system, login times, pages visited, and game session logs.
- Authentication and compliance data: copies of identification documents, proof of address, and self-exclusion or responsible gaming logs.
- Partner data: affiliate ID, referral links, traffic sources, commission details, and marketing performance metrics.
We hold sensitive data to a minimum and never ask for political opinions, religious beliefs, or biometric data beyond what is absolutely necessary for identity verification under Austrian anti-money laundering rules. Our approach maintains the collection limited and focused. All data is managed according to the rule of data minimization.
Recognizing Our Data Protection Commitment
Privacy at LalaBet Casino is not an oversight. It shapes every framework, process, and partnership we uphold. Our privacy framework meets the requirements set by Austrian regulators and the European Data Protection Board. Our Data Protection Officer oversees all processing activities and can address any questions you have about your rights at any time. We review our procedures on a routine schedule, run data protection impact reviews, and train our staff so personal data is managed with care. The same rigorous controls apply to our affiliate programme. We are open about the data we collect and the objectives for which we use it, and we never sell your personal information to third parties. Our objective is to create a protected, trustworthy atmosphere where you can enjoy our entertainment options without jeopardizing your privacy.
Using Your Data Subject Rights
Under the GDPR, you enjoy a set of powerful rights that let you manage your personal data. You have the right to access the data we keep about you and to obtain a duplicate in a organized, commonly used format. You can ask us to rectify wrong or partial information without undue delay. In certain circumstances, you may seek that we erase your data, constrain its processing, or object to processing based on valid interests. You also have the right to data transferability for information you have given us, and you can withdraw your consent for promotional or other permission-based processing at any time. To exercise any of these rights, reach our Data Protection Officer at the email address provided in the contact section of our website. We will respond to your demand within one month. We will not charge a fee unless the request is obviously unfounded or disproportionate. You also have the right to lodge a appeal with the Austrian Data Protection Authority if you consider our processing breaches data protection law.