At LalaBet Casino, privacy is a core principle, and we strive to protecting the personal information of every user who visits lalabet.at from Austria. This Privacy Policy describes how we gather, manage, retain, and disclose your information when you visit the site, sign up, use our gaming services, or enroll in the affiliate program. We follow the General Data Protection Regulation (EU) 2016/679, the Austrian Data Protection Act (DSG), and all applicable national legislation. Our approach is built on openness, fairness, and accountability. We wish to clarify what data we gather, why we need it, what we use it for, and how you can stay in control of it at every phase. This document also acts as a clear reference for affiliate partners, specifying how their data is handled within the LalaBet Casino affiliate programme. By using our services, you confirm that you have read and understood this policy.
Types of Personal Data We Collect
To deliver our services and meet our legal obligations, we obtain several groups of personal data. We gather this information straight from you, as you interact as you interact with our website, and in some cases from carefully selected third parties. We obtain only the data needed for the purposes described in this policy. These groups include:
- Personal and contact data: full name, date of birth, home address, email address, and phone number.
- Profile and financial data: username, password, transaction history, deposit and withdrawal details, and payment method data.
- Tech and usage data: IP address, browser type, device identifiers, operating system, login times, pages visited, and game session logs.
- Verification and compliance data: copies of identification documents, proof of address, and self-exclusion or responsible gaming records.
- Referral data: affiliate ID, referral links, traffic sources, commission information, and marketing performance metrics.
We maintain sensitive data to a minimum and never request political opinions, religious beliefs, or biometric data beyond what is absolutely necessary for identity verification under Austrian anti-money laundering rules. Our strategy ensures the collection limited and focused. All data is handled according to the concept of data minimization.
Purposes for Processing Your Details
We manage your personal data for a specific set of goals, each connected to a specific legal basis. The main reason is to create and oversee your player account, process deposits and withdrawals, and offer the gaming services you have asked for under our terms and conditions. Without this handling, we could not meet our contractual obligations to you. We also employ data to improve our platform, personalize your experience, and dispatch relevant promotional offers if you have given clear consent. Complying with legal obligations is another key objective; we confirm your identity, monitor transactions for suspicious activity, and retain records as required by Austrian gambling regulations and anti-money laundering directives. We also handle data to identify and stop fraud, protect game integrity, and secure our systems. For the affiliate programme, we leverage affiliate data to track referrals, determine commissions, and enhance our marketing partnerships.
Understanding Our Privacy Promise
Privacy at LalaBet Casino is not an afterthought. It shapes every framework, process, and collaboration we maintain. Our confidentiality framework meets the standards set by Austrian regulators and the European Data Protection Board. Our Data Protection Officer manages all processing activities and can address any questions you have about your rights at any time. We review our policies on a routine schedule, run data protection impact evaluations, and train our staff so personal data is treated with care. The same strict controls apply to our affiliate programme. We are open about the data we collect and the reasons for which we use it, and we never sell your personal information to third parties. Our objective is to create a safe, trustworthy environment where you can experience our entertainment options without endangering your privacy.
Legal Foundations for Data Handling
Each processing activity we perform rests on a valid legal basis under Article 6 of the GDPR https://lalabet.at/legal-and-affiliates/. The bases we rely on most often are the performance of a contract, compliance with a legal obligation, our legitimate interests, and your consent. When you register an account, processing your identity and financial data is necessary to perform the contract between you and LalaBet Casino. Identity verification and transaction monitoring are carried out to comply with Austrian anti-money laundering laws and the conditions of our gambling licence. We may process usage data to better our services based on legitimate interest, after a balancing test to confirm your rights are not overridden. For marketing communications and certain cookies, we base on your freely given consent, which you can cancel at any time. When we process affiliate data for programme management, we usually base on contractual necessity and legitimate interest, and we ensure the processing is proportionate and does not infringe the rights of the data subjects involved.
Global Transfers and Safeguards
As an online casino working in a global environment, some of our service providers and group companies may be located outside the European Economic Area. When we send personal data to countries without an adequacy decision from the European Commission, we implement appropriate safeguards to guarantee an equivalent level of protection. These safeguards comprise standard contractual clauses approved by the European Commission, binding corporate rules, and, where applicable, additional technical and organizational measures. We perform transfer impact assessments to confirm that the law and practices of the destination country do not undermine the safeguards we apply. For Austrian users, this signifies your data remains protected by the same rigorous standards required by the GDPR, no matter where it is processed. We are forthcoming about the locations of our key processors and will give you more details about the specific safeguards applied to any particular transfer upon request.
Providing Information to Outside Entities
We disclose your personal data only with vetted third parties that enable us offer our services, and we do so under stringent contractual safeguards. These recipients include payment service providers that handle deposits and withdrawals, identity verification and know-your-customer (KYC) providers that support us meet regulatory requirements, and IT infrastructure and hosting companies that keep our platform secure. We may also share data with our affiliate software platform to monitor referrals and determine commissions for affiliate partners. In every case, we limit the data shared to what is strictly necessary for the third party to execute its function. We never sell your personal data to advertisers, data brokers, or any other commercial entity. We may also have to disclose information to Austrian regulatory bodies, law enforcement agencies, or courts in response to valid legal requests. We review each request diligently to ensure it is valid and proportionate before we comply.
Information Handling in the Affiliate Programme
This affiliate programme forms a crucial part of the LalaBet Casino ecosystem, and we apply the same privacy standards for affiliates as we extend to players. When you sign up for the affiliate programme, we obtain the personal data you submit during sign-up, such as your name, contact details, payment information, and tax identification number. We also automatically collect data regarding traffic produced through your affiliate links, like click-through rates, registrations, and player activity metrics. This data is utilised solely to manage the affiliate relationship, calculate and pay commissions, and improve our marketing efforts. We refrain from sharing your individual affiliate data with other affiliates or third parties for purposes unrelated to the programme. You maintain the same data subject rights as any other individual, encompassing the right to access, correct, and delete your information, in accordance with our legal retention obligations. We have concluded data processing agreements with the providers of our affiliate platform to ensure your data is managed lawfully and safely at all times.
Record Keeping and Protection Protocols
We retain your personal data only for as long as needed to fulfil the purposes for which it was collected, or as required by Austrian law. Account data is typically held for the period of your relationship with us and for up to ten years after account closure to comply with anti-money laundering and tax retention requirements. Once the retention period ends, we safely remove or anonymize your data. To protect your information, we have put in place technical and organizational security measures. These encompass encryption of data in transit and at rest, strict access controls based on the principle of least privilege, regular penetration testing, and continuous surveillance of our systems for suspicious behavior. Our staff receive ongoing privacy and security instruction, and we maintain a tested incident response plan. If a personal data breach poses a danger to your rights and freedoms, we will inform the Austrian Data Protection Authority without undue delay and, where required, inform you directly.
Using Your Personal Data Rights
Under the GDPR, you possess a set of strong rights that enable you control your personal data. You have the right to access the data we hold about you and to receive a version in a organized, commonly used format. You can request us to rectify inaccurate or partial information without undue delay. In certain circumstances, you may seek that we erase your data, limit its handling, or oppose to processing based on valid interests. You also have the right to data transferability for information you have given us, and you can withdraw your consent for promotional or other permission-based processing at any time. To apply any of these rights, notify our Data Protection Officer at the email address provided in the contact section of our website. We will answer to your demand within one month. We will not charge a charge unless the request is manifestly groundless or excessive. You also have the right to file a grievance with the Austrian Data Protection Authority if you consider our processing infringes data protection law.