LalaBet Casino’s Privacy Policy for Austria Users

At LalaBet Casino, data protection is a basic right, and we strive to protecting the personal data of every user who accesses lalabet https://lalabet.at/legal-and-affiliates/.at from Austria. This Privacy Policy explains how we gather, process, store, and transfer your details when you visit the site, register, engage with our games, or enroll in the affiliate program. We comply with the General Data Protection Regulation (EU) 2016/679, the Austrian Data Protection Act (DSG), and all applicable national legislation. Our approach is built on transparency, equity, and accountability. We wish to clarify what data we gather, why we need it, what we do with it, and how you can stay in control of it at every stage. This document also functions as a clear reference for affiliate partners, specifying how their data is treated within the LalaBet Casino affiliate programme. By using our services, you acknowledge that you have perused and accepted this policy.

Data Storage and Protection Protocols

We keep your personal data only for as long as needed to fulfil the purposes for which it was gathered, or as stipulated by Austrian law. Account data is typically maintained for the length of your relationship with us and for up to ten years after account closure to comply with anti-money laundering and tax retention duties. Once the retention period ends, we safely remove or anonymize your data. To secure your information, we have implemented technical and organizational security controls. These comprise encryption of data in transit and at rest, strict access controls based on the principle of least privilege, regular penetration testing, and continuous surveillance of our systems for suspicious activity. Our staff undergo ongoing privacy and security training, and we uphold a tested incident response plan. If a personal data breach poses a danger to your rights and freedoms, we will notify the Austrian Data Protection Authority without undue postponement and, where required, inform you directly.

Categories of Personal Data We Obtain

To offer our services and meet our legal duties, we obtain several categories of personal data. We obtain this information straight from you, as you interact as you browse our website, and in some cases from carefully selected third parties. We obtain only the data required for the objectives described in this policy. These groups include:

• Identification and contact data: full name, date of birth, home address, email address, and phone number.
• Account-related and financial data: username, password, transaction history, deposit and withdrawal details, and payment method details.
• Technical and usage data: IP address, browser type, device identifiers, operating system, login times, pages visited, and game session logs.
• Authentication and compliance data: copies of identification documents, proof of address, and self-exclusion or responsible gaming documentation.
• Referral data: affiliate ID, referral links, traffic sources, commission details, and marketing performance metrics.

We keep sensitive data to a minimum and never demand political opinions, religious beliefs, or biometric data beyond what is absolutely necessary for identity verification under Austrian anti-money laundering rules. Our strategy ensures the collection constrained and focused. All data is handled according to the principle of data minimization.

Exploring Our Data Protection Promise

Privacy at LalaBet Casino is not an afterthought. It shapes every system, process, and partnership we uphold. Our privacy framework meets the benchmarks set by Austrian regulators and the European Data Protection Board. Our Data Protection Officer oversees all processing activities and can respond to any questions you have about your rights at any time. We review our guidelines on a consistent schedule, run data protection impact evaluations, and train our staff so personal data is handled with care. The same strict controls apply to our affiliate programme. We are transparent about the data we collect and the objectives for which we use it, and we never sell your personal information to third parties. Our aim is to create a safe, trustworthy atmosphere where you can experience our entertainment options without endangering your privacy.

Exercising Your Privacy Rights

Under the GDPR, you possess a set of powerful rights that enable you control your private data. You are entitled to access the data we store about you and to receive a duplicate in a structured, commonly used format. You can ask us to correct wrong or incomplete information without undue delay. In particular circumstances, you may request that we delete your data, restrict its processing, or oppose to processing based on lawful interests. You also have the right to data portability for information you have given us, and you can revoke your permission for marketing or other permission-based processing at any time. To utilize any of these rights, reach our Data Protection Officer at the email address given in the contact section of our website. We will reply to your inquiry within one month. We will not levy a fee unless the request is manifestly unfounded or disproportionate. You also have the right to file a appeal with the Austrian Data Protection Authority if you consider our processing violates data protection law.

Global Transfers and Measures

As an online casino functioning in a global environment, some of our service providers and group companies may be situated outside the European Economic Area. When we send personal data to countries without an adequacy decision from the European Commission, we establish appropriate safeguards to ensure an equivalent level of protection. These safeguards comprise standard contractual clauses approved by the European Commission, binding corporate rules, and, where applicable, additional technical and organizational measures. We perform transfer impact assessments to confirm that the law and practices of the destination country do not reduce the safeguards we apply. For Austrian users, this implies your data remains protected by the same rigorous standards required by the GDPR, no matter where it is processed. We are open about the locations of our key processors and will give you more details about the specific safeguards applied to any particular transfer upon request.

Purposes for Handling Your Information

We handle your personal data for a specific set of goals, each connected to a specific legal basis. The main reason is to set up and oversee your player account, carry out deposits and withdrawals, and provide the gaming services you have requested under our terms and conditions. Without this processing, we could not satisfy our contractual obligations to you. We also utilize data to improve our platform, tailor your experience, and dispatch relevant promotional offers if you have given clear consent. Meeting legal obligations is another key reason; we authenticate your identity, monitor transactions for suspicious activity, and maintain records as required by Austrian gambling regulations and anti-money laundering directives. We also handle data to spot and prevent fraud, ensure game integrity, and shield our systems. For the affiliate programme, we utilize affiliate data to monitor referrals, compute commissions, and improve our marketing partnerships.

Providing Information to Outside Entities

We share your personal data only with vetted third parties that assist us provide our services, and we do so under stringent contractual safeguards. These parties include payment service providers that manage deposits and withdrawals, identity verification and know-your-customer (KYC) providers that assist us meet regulatory requirements, and IT infrastructure and hosting companies that ensure our platform secure. We may also share data with our affiliate software platform to monitor referrals and determine commissions for affiliate partners. In every case, we restrict the data shared to what is essential for the third party to perform its function. We do not sell your personal data to advertisers, data brokers, or any other commercial entity. We may also have to disclose information to Austrian regulatory bodies, law enforcement agencies, or courts in response to legitimate legal requests. We review each request carefully to ensure it is valid and proportionate before we comply.

Personal Data Management for the Affiliate Programme

This affiliate programme is a key part of the LalaBet Casino ecosystem, and we maintain the same privacy standards to affiliates as we do to players. When you join the affiliate programme, we gather the personal data you submit during sign-up, such as your name, contact details, payment information, and tax identification number. We likewise automatically gather data regarding traffic produced through your affiliate links, such as click-through rates, registrations, and player activity metrics. This information is utilised solely to manage the affiliate relationship, calculate and pay commissions, and improve our marketing efforts. We never share your individual affiliate data with other affiliates or outside parties for purposes unrelated to the programme. You retain the same data subject rights as any other user, such as the right to access, correct, and delete your information, in accordance with our legal retention obligations. We have executed data processing agreements with our affiliate platform providers to guarantee your data is managed lawfully and safely at all times.

Legal Basis for Data Processing

Every processing activity we undertake rests on a lawful legal basis under Article 6 of the GDPR. The bases we rely on most often are the performance of a contract, compliance with a legal obligation, our legitimate interests, and your consent. When you open an account, processing your identity and financial data is necessary to perform the contract between you and LalaBet Casino. Identity verification and transaction monitoring are carried out to comply with Austrian anti-money laundering laws and the conditions of our gambling licence. We may process usage data to enhance our services based on legitimate interest, after a balancing test to ensure your rights are not overridden. For marketing communications and certain cookies, we depend on your freely given consent, which you can withdraw at any time. When we process affiliate data for programme management, we usually rely on contractual necessity and legitimate interest, and we ensure the processing is proportionate and does not infringe the rights of the data subjects involved.