At LalaBet Casino, data protection is a core principle, and we are dedicated to securing the personal data of every user who comes to lalabet.at from Austria. This Privacy Policy explains how we collect, process, retain, and disclose your information when you visit the site, create an account, utilize our gaming offerings, or join the affiliate programme. We comply with the General Data Protection Regulation (EU) 2016/679, the Austrian Data Protection Act (DSG), and all pertinent national legislation. Our method is built on clarity, equity, and responsibility. We wish to clarify what data we collect, why we need it, what we use it for, and how you can stay in control of it at every phase. This document also serves as a clear reference for affiliate partners, detailing how their data is treated within the LalaBet Casino affiliate programme. By engaging with our offerings, you confirm that you have read and understood this policy.
Recognizing Our Confidentiality Commitment
Privacy at LalaBet Casino is not an afterthought. It shapes every system, process, and agreement we sustain. Our data protection framework meets the standards set by Austrian regulators and the European Data Protection Board. Our Data Protection Officer supervises all processing activities and can address any questions you have about your rights at any time. We review our guidelines on a consistent schedule, run data protection impact reviews, and train our staff so personal data is managed with care. The same rigorous controls apply to our affiliate programme. We are open about the data we collect and the purposes for which we use it, and we never sell your personal information to third parties. Our goal is to create a secure, trustworthy setting where you can appreciate our entertainment options without endangering your privacy.
Global Transfers and Measures
As an online casino operating in a global environment, some of our service providers and group companies may be located outside the European Economic Area. When we transfer personal data to countries without an adequacy decision from the European Commission, we implement appropriate safeguards to maintain an equivalent level of protection. These safeguards comprise standard contractual clauses approved by the European Commission, binding corporate rules, and, where applicable, additional technical and organizational measures. We conduct transfer impact assessments to check that the law and practices of the destination country do not reduce the safeguards we apply. For Austrian users, this implies your data remains protected by the same rigorous standards required by the GDPR, no matter where it is processed. We are transparent about the locations of our key processors and will give you more details about the specific safeguards applied to any particular transfer upon request.
Groups of Personal Data We Gather
To deliver our services and meet our legal duties, we gather several groups of personal data. We obtain this information straight from you, automatically as you browse our website, and in some cases from trusted third parties. We collect only the data necessary for the objectives described in this policy. These types include:
- Personal and contact data: full name, date of birth, home address, email address, and phone number.
- Account and financial data: username, password, transaction history, deposit and withdrawal information, and payment method details.
- System and usage data: IP address, browser type, device identifiers, operating system, login times, pages visited, and game session logs.
- Validation and compliance data: copies of identification documents, proof of address, and self-exclusion or responsible gaming logs.
- Referral data: affiliate ID, referral links, traffic sources, commission details, and marketing performance metrics.
We keep sensitive data to a minimum and never ask for political opinions, religious beliefs, or biometric data beyond what is absolutely necessary for identity verification under Austrian anti-money laundering rules. Our method ensures the collection restricted and focused. All data is handled according to the concept of data minimization.
Information Retention and Safeguards
We keep your personal data only for as long as needed to meet the purposes for which it was collected, LalaBet, or as stipulated by Austrian law. Account data is typically kept for the period of your relationship with us and for up to ten years after account closure to comply with anti-money laundering and tax retention duties. Once the retention period expires, we safely remove or anonymize your data. To protect your information, we have implemented technical and organizational security controls. These comprise encryption of data in transit and at rest, strict access controls based on the principle of least privilege, regular penetration testing, and continuous surveillance of our systems for suspicious activity. Our staff receive ongoing privacy and security education, and we uphold a tested incident response plan. If a personal data breach poses a danger to your rights and freedoms, we will inform the Austrian Data Protection Authority without undue hesitation and, where required, notify you directly.
Purposes for Processing Your Information
We manage your personal data for a clearly defined set of purposes, each tied to a specific legal basis. The main reason is to establish and administer your player account, carry out deposits and withdrawals, and provide the gaming services you have sought under our terms and conditions. Without this processing, we would not be able to meet our contractual obligations to you. We also use data to upgrade our platform, customize your experience, and transmit relevant promotional offers if you have given clear consent. Meeting legal obligations is another key purpose; we confirm your identity, monitor transactions for suspicious activity, and keep records as required by Austrian gambling regulations and anti-money laundering directives. We also handle data to detect and stop fraud, safeguard game integrity, and shield our systems. For the affiliate programme, we leverage affiliate data to follow referrals, calculate commissions, and improve our marketing partnerships.
Enforcing Your Personal Data Rights
Under the GDPR, you have a set of powerful rights that let you control your personal information. You are entitled to access the data we hold about you and to receive a version in a structured, commonly used format. You can require us to rectify wrong or missing information without undue delay. In particular circumstances, you may request that we remove your data, restrict its processing, or oppose to processing based on legitimate interests. You also have the right to data transferability for information you have given us, and you can withdraw your agreement for advertising or other consent-based processing at any time. To exercise any of these rights, notify our Data Protection Officer at the email address supplied in the contact section of our website. We will respond to your request within one month. We will not charge a fee unless the request is manifestly unfounded or unreasonable. You also have the right to submit a complaint with the Austrian Data Protection Authority if you believe our processing violates data protection law.
Sharing Information with Third Parties
We provide your personal data only with reliable third parties that enable us provide our services, and we do so under stringent contractual safeguards. These entities include payment service providers that process deposits and withdrawals, identity verification and know-your-customer (KYC) providers that help us meet regulatory requirements, and IT infrastructure and hosting companies that ensure our platform secure. We may also share data with our affiliate software platform to track referrals and determine commissions for affiliate partners. In every case, we confine the data shared to what is essential for the third party to perform its function. We never sell your personal data to advertisers, data brokers, or any other commercial entity. We may also be required to disclose information to Austrian regulatory bodies, law enforcement agencies, or courts in response to valid legal requests. We assess each request diligently to ensure it is legal and proportionate before we respond.
Legal Grounds for Data Handling
Each processing activity we perform is founded on a sound legal basis under Article 6 of the GDPR. The bases we depend on most often are the performance of a contract, compliance with a legal obligation, our legitimate interests, and your consent. When you open an account, processing your identity and financial data is necessary to perform the contract between you and LalaBet Casino. Identity verification and transaction monitoring are performed to comply with Austrian anti-money laundering laws and the conditions of our gambling licence. We may process usage data to enhance our services based on legitimate interest, after a balancing test to confirm your rights are not overridden. For marketing communications and certain cookies, we depend on your freely given consent, which you can revoke at any time. When we process affiliate data for programme management, we usually rely on contractual necessity and legitimate interest, and we make sure the processing is proportionate and does not infringe the rights of the data subjects involved.
Personal Data Management in the Affiliate Programme
This affiliate programme is a key part of the LalaBet Casino ecosystem, and we apply the same privacy standards for affiliates as we do to players. When you join the affiliate programme, we collect the personal data you submit during sign-up, such as your name, contact details, payment information, and tax identification number. We additionally automatically capture data on traffic generated through your affiliate links, including click-through rates, registrations, and player activity metrics. This data is used only to manage the affiliate relationship, calculate and pay commissions, and improve our marketing efforts. We never share your individual affiliate data with third-party affiliates or third parties for purposes unrelated to the programme. You maintain the same data subject rights as any other participant, including the right to access, correct, and delete your information, in accordance with our legal retention obligations. We have signed data processing agreements with our affiliate platform providers to make sure your data is managed lawfully and safely at all times.