At Trino Casino, we manage trinoo https://trinoo.de/legal-and-affiliates/.de and we accept protecting the personal data of our German players seriously. As a licensed entertainment platform, we’ve established our operations to fulfill the strict standards of the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG). This document describes exactly how we collect, store, manage, and safeguard your information when you use our website, participate in games, or engage with our affiliate systems. We believe transparency is crucial for a trusting relationship. By laying out our data handling practices clearly, we want you to remain confident that your sensitive financial details and personal identifiers are kept in a secure digital environment, controlled by a responsible data controller that respects local laws and jurisdictional boundaries.
Our principal data processing systems reside in protected data centers inside the European Union, but sometimes we need to use sub-processors in different countries. In these rare cases, we guarantee the identical degree of protection by implementing Standard Contractual Clauses endorsed by the European Commission, combined with a comprehensive Transfer Impact Assessment. To safeguard your financial data from illegitimate access during communication, we enforce Transport Layer Security (TLS 1.3) encryption across all endpoints, blocking obsolete cipher suites. At rest, personal data within our managed database clusters is secured by AES‑256 encryption, and access to decryption keys is limited to a separate privileged access management system. We perform regular vulnerability scans, compulsory penetration tests, and strict logical access controls so only the individuals who require it can access your data. We have a dedicated Data Protection Officer you can access through our platform, and we have an incident response plan that obligates us to inform the appropriate German supervisory authority within 72 hours if a personal data breach could place your rights at risk.
If you live in Germany, you have a collection of prerogatives that we’ve made easy to enforce. You may file a subject access request at any time. We then have to verify whether we process your personal details and provide you with a copy in a systematic, standard, machine‑readable format within 30 days. The right to amendment enables you to fix outdated or inaccurate profile information without hesitation, which is vital for efficient payment processing. In specific situations, you may request a restriction of operations, particularly if you dispute the correctness of data while we confirm it. The right to removal, frequently referred to as the “right to be forgotten,” applies when the data has become unnecessary for the initial purpose, though statutory retention duties may temporarily supersede this request. You also have the right to data transfer for information furnished under agreement or contract, so you can move your activity log to a alternative provider. You enjoy an absolute prerogative to object to direct marketing, and you can object to operations based on justified grounds, which we’ll evaluate against our compelling grounds. Grievances can be filed immediately with the data protection authority of your German federal state if you think a breach has occurred.
We use a multi-layered system: computerized checks against national databases and human document review. When you create an account, you must upload your national ID card or passport through an encrypted portal. Our compliance team cross‑references this with the Schufa identity service to verify legal age. If something is inconsistent, we temporarily restrict the account until a video identification call with a certified agent can clarify the situation, all in line with the German Interstate Treaty on Gambling.
No. Our affiliate programme employs a strict aggregation firewall. We do not share your name, contact details, or payment records with the referring affiliate. The partner only accesses a pseudonymized dashboard with confirmed registration counts and a statistical summary of net gaming revenue. Our affiliate agreements explicitly prohibit them from attempting to identify individual players. This keeps your gameplay completely separate from the marketing channel that brought you to Trino Casino.
Go to “Communication Settings” in your account dashboard and turn off promotional channels. Every marketing email we send has a one‑click unsubscribe link at the bottom that works right away. To withdraw consent for postal mail or SMS, contact our Data Protection Officer through the support ticket system. We’ll stop direct marketing within at most 48 hours after receiving your request.
If business ever stops, we are legally required to notify the competent German data protection authority and all active users in advance. Mandatory transactional logs and identification records will be securely transferred to a certified archival service or handed over to the responsible regulatory body for as long as the law demands. Any data that isn’t mandatory gets securely destroyed using cryptographic wiping techniques before the closure of our servers is finalized.
We use a limited https://www.bild.de/news/inland/eurojackpot-am-freitag-13-6-2025-die-gewinnzahlen-von-heute-6849325a5f36f04e93218a9f automated profiling system to flag possible fraud or bonus abuse. If the system blocks a withdrawal, we’re required by law to involve a human. Our financial risk team manually checks every flagged transaction before we tell you the final decision. You can challenge that decision, give your side, and ask for a full manual review by our risk management specialists.
Send an email from the address tied to your account to our Data Protection Officer, put “SAR” in the subject line. We’ll authenticate your identity with https://www.srf.ch/news/zuerich-schaffhausen-casino-zuerich-noch-kein-full-house a two‑factor process. Following that, we compile your data from all systems—chat logs, game history, identity documents—and generate a digitally signed PDF and a machine‑readable JSON file, which you’ll receive within one calendar month.
Our website employs various digital markers, and our consent management system ensures that no unnecessary trackers trigger until a German visitor gives active consent through our detailed preference center. Necessary session cookies, which do not save personal information but keep your game session and security keys working, are free from consent requirements under the ePrivacy Directive as enforced in German legislation. For persistent analytics and affiliate attribution cookies, we employ backend tagging where practicable to limit frontend exposure. Our affiliate tracking pixel operates on a first‑party context model to circumvent current browser restrictions, allowing correct tracking without intrusive fingerprinting scripts that are forbidden under German internet law. We’ve grouped all tracking codes with comprehensive descriptions of their purpose, duration, and the third‑party vendors involved, so you can adjust your settings at any time. Declining marketing cookies doesn’t harm the performance of the gaming lobby or payment systems. That reflects our privacy‑by‑design approach: basic services are completely available irrespective of consent choices you choose.
Our affiliate network, available on our legal and affiliates hub, serves as a separate data processing area. We function as a joint controller together with our marketing partners. When a German webmaster or content creator registers for our partner program, we gather business details like tax identification numbers, bank account information for paying commissions, and traffic source analytics. Our tracking mechanism uses first‑party cookies dropped via a unique affiliate link, which enables us to attribute referred traffic to the correct partner account without capturing the browsing history of unregistered visitors. We manage referred player data in a pseudonymized format for commission calculation, so the affiliate observes aggregated performance numbers rather than individual player identities. We examine player activity logs against traffic sources to catch bonus abuse or fake incentivized traffic; this is based on our contractual and legitimate business interests. We have a strict affiliate code of conduct that prohibits partners from targeting self-excluded individuals or using unauthorized direct marketing that could compromise the privacy expectations of the German audience.
We act as the data controller for all personal details collected through Trino Casino at trinoo.de, which is customized for German users. Our legal team operates from a registered office inside the European Economic Area, making us fully bound by GDPR enforcement. When we process your data, we rely on six defined lawful bases. Typically, we process your data to satisfy our contractual commitments—including placing bets, processing withdrawals, and keeping your account active. We also rely on legitimate interest for analytics and security purposes, like fraud detection algorithms and network integrity checks, provided these do not override your fundamental rights and freedoms. Where legislation requires it, especially under anti-money laundering laws and German gambling ordinances, processing is carried out due to a legal duty. For marketing communications, including our affiliate programme, we rely on your explicit consent, which you can withdraw at any time without any impact on the core services we provide.
To offer a flawless entertainment experience that complies with German regulations, we collect a few particular kinds of personal data, only what’s really needed. During account creation, we require identification details: your legal first and last name, residential address with postal code, verified email address, and date of birth to ensure you fulfill the strict age minimum established by German regulators. When you start playing, we process financial transaction data—deposit amounts, withdrawal methods, partial payment card numbers encrypted with TLS, and e-wallet identifiers. Our systems record technical device data like your IP address, which we geo-filter to ensure you’re in a permitted location, along with browser fingerprint hashes and operating system specs. We also track usage patterns and game session logs, logging bet history and time spent playing, so we can meet our responsible gaming obligations. We do not obtain special categories of sensitive data except when you willingly give that information during a responsible gaming self-assessment or a support inquiry.
We don’t keep your personal data indefinitely. We observe a strict storage limitation principle. Active customer accounts contain data for the duration of the business relationship, from the moment you register until you formally close the account. After account closure, a holding period begins, driven mostly by German tax legislation and anti-money laundering rules. Transactional logs, identification documents collected under Know Your Customer protocols, and wagering history are securely archived for ten years from the end of the calendar year of the last transaction. Once that statutory retention window expires, we permanently destroy or irreversibly anonymize the records so re-identification becomes technically impossible. Web server log data that contains IP addresses gets truncated after a strict thirty‑day cycle to reduce security risks. For accounts that go dormant—no activity but not closed—we send a proactive reminder before the dormancy threshold, so we can ask for renewed consent or start the deletion process, always in line with the storage limitation principle.
