At LalaBet Casino, data protection is a basic right, and we’re committed to safeguarding the private data of every user who comes to lalabet lalabet.at.at from Austria. This Privacy Policy outlines how we obtain, handle, retain, and disclose your information when you access the platform, register, utilize our gaming offerings, or join the affiliate programme. We comply with the General Data Protection Regulation (EU) 2016/679, the Austrian Data Protection Act (DSG), and all pertinent national legislation. Our approach is built on openness, fairness, and accountability. We wish to clarify what data we obtain, why we request it, what we process it for, and how you can stay in control of it at every phase. This document also serves as a detailed resource for affiliate partners, detailing how their data is treated within the LalaBet Casino affiliate programme. By using our services, you agree that you have perused and accepted this policy.

Data Storage and Safeguards

We retain your personal data only for as long as necessary to satisfy the purposes for which it was collected, or as required by Austrian law. Account data is typically held for the period of your relationship with us and for up to ten years after account closure to comply with anti-money laundering and tax retention duties. Once the retention period concludes, we permanently erase or anonymize your data. To safeguard your information, we have put in place technical and organizational security measures. These encompass encryption of data in transit and at rest, strict access controls based on the principle of least privilege, regular penetration testing, and continuous monitoring of our systems for suspicious behavior. Our staff undergo ongoing privacy and security training, and we maintain a tested incident response plan. If a personal data breach poses a danger to your rights and freedoms, we will alert the Austrian Data Protection Authority without undue delay and, where required, advise you directly.

Types of Personal Data We Collect

To deliver our services and meet our legal duties, we obtain several types of personal data. We obtain this information directly from you, automatically as you browse our website, and in some cases from vetted third parties. We obtain only the data required for the goals described in this policy. These groups include:

• Identity and contact data: full name, date of birth, home address, email address, and phone number.
• Profile and financial data: username, password, transaction history, deposit and withdrawal information, and payment method data.
• Tech and usage data: IP address, browser type, device identifiers, operating system, login times, pages visited, and game session logs.
• Validation and compliance data: copies of identification documents, proof of address, and self-exclusion or responsible gaming records.
• Affiliate data: affiliate ID, referral links, traffic sources, commission information, and marketing performance metrics.

We keep sensitive data to a minimum and never request political opinions, religious beliefs, or biometric data beyond what is strictly required for identity verification under Austrian anti-money laundering rules. Our method maintains the collection restricted and focused. All data is processed according to the concept of data minimization.

Understanding Our Privacy Commitment

Privacy at LalaBet Casino is not an afterthought. It shapes every framework, process, and collaboration we maintain. Our data protection framework meets the standards set by Austrian regulators and the European Data Protection Board. Our Data Protection Officer manages all processing activities and can answer any questions you have about your rights at any time. We review our procedures on a routine schedule, run data protection impact reviews, and train our staff so personal data is managed with care. The same stringent controls apply to our affiliate programme. We are clear about the data we collect and the objectives for which we use it, and we never sell your personal information to third parties. Our aim is to create a protected, trustworthy atmosphere where you can experience our entertainment options without compromising your privacy.

International Transfers and Safeguards

As an online casino working in a global environment, some of our service providers and group companies may be located outside the European Economic Area. When we move personal data to countries without an adequacy decision from the European Commission, we establish appropriate safeguards to ensure an equivalent level of protection. These safeguards cover standard contractual clauses approved by the European Commission, binding corporate rules, and, where applicable, additional technical and organizational measures. We conduct transfer impact assessments to verify that the law and practices of the destination country do not undermine the safeguards we apply. For Austrian users, this means your data remains protected by the same rigorous standards required by the GDPR, no matter where it is processed. We are transparent about the locations of our key processors and will give you more details about the specific safeguards applied to any particular transfer upon request.

Exercising Your Privacy Rights

Under the GDPR, you possess a set of strong rights that let you manage your private data. You are entitled to access the data we keep about you and to get a duplicate in a structured, commonly used format. You can ask us to fix inaccurate or partial information without undue delay. In specific circumstances, you may request that we remove your data, restrict its processing, or oppose to processing based on valid interests. You also have the right to data transferability for information you have given us, and you can withdraw your consent for marketing or other consent-based processing at any time. To apply any of these rights, reach our Data Protection Officer at the email address supplied in the contact section of our website. We will respond to your demand within one month. We will not impose a fee unless the request is obviously groundless or unreasonable. You also have the right to submit a appeal with the Austrian Data Protection Authority if you believe our processing violates data protection law.

Reasons for Handling Your Details

We process your personal data for a specific set of goals, each linked to a specific legal basis. The main reason is to create and oversee your player account, process deposits and withdrawals, and deliver the gaming services you have requested under our terms and conditions. Without this handling, we could not meet our contractual obligations to you. We also use data to improve our platform, tailor your experience, and transmit relevant promotional offers if you have given clear consent. Complying with legal obligations is another key reason; we verify your identity, track transactions for suspicious activity, and maintain records as required by Austrian gambling regulations and anti-money laundering directives. We also handle data to spot and prevent fraud, safeguard game integrity, and fortify our systems. For the affiliate programme, we utilize affiliate data to track referrals, calculate commissions, and improve our marketing partnerships.

Personal Data Management within the Affiliate Programme

This affiliate programme is an essential component of the LalaBet Casino ecosystem, and we apply the same privacy standards for affiliates as we apply to players. When you join the affiliate programme, we gather the personal data you supply when registering, such as your name, contact details, payment information, and tax identification number. We additionally automatically capture data regarding traffic produced through your affiliate links, including click-through rates, registrations, and player activity metrics. This data is used only to manage the affiliate relationship, calculate and pay commissions, and improve our marketing efforts. We do not share your individual affiliate data with third-party affiliates or outside parties for purposes unrelated to the programme. You retain the same data subject rights as any other user, encompassing the right to access, correct, and delete your information, subject to our legal retention obligations. We have signed data processing agreements with the providers of our affiliate platform to guarantee your data is managed lawfully and securely at all times.

Providing Information to Outside Entities

We provide your personal data only with reliable third parties that assist us offer our services, and we do so under rigorous contractual safeguards. These entities include payment service providers that process deposits and withdrawals, identity verification and know-your-customer (KYC) providers that support us meet regulatory requirements, and IT infrastructure and hosting companies that ensure our platform secure. We may also share data with our affiliate software platform to monitor referrals and determine commissions for affiliate partners. In every case, we limit the data shared to what is strictly necessary for the third party to execute its function. We do not sell your personal data to advertisers, data brokers, or any other commercial entity. We may also need to disclose information to Austrian regulatory bodies, law enforcement agencies, or courts in response to lawful legal requests. We assess each request thoroughly to ensure it is legal and proportionate before we comply.

Legal Grounds for Data Processing

Every processing activity we carry out rests on a sound legal basis under Article 6 of the GDPR. The bases we rely on most often are the performance of a contract, compliance with a legal obligation, our legitimate interests, and your consent. When you create an account, processing your identity and financial data is necessary to perform the contract between you and LalaBet Casino. Identity verification and transaction monitoring are performed to comply with Austrian anti-money laundering laws and the conditions of our gambling licence. We may process usage data to enhance our services based on legitimate interest, after a balancing test to confirm your rights are not overridden. For marketing communications and certain cookies, we depend on your freely given consent, which you can revoke at any time. When we process affiliate data for programme management, we usually depend on contractual necessity and legitimate interest, and we guarantee the processing is proportionate and does not infringe the rights of the data subjects involved.