At LalaBet Casino, privacy is a core principle, and we strive to safeguarding the private data of every user who accesses lalabet lalabet.at.at from Austria. This Privacy Policy describes how we collect, process, keep, and transfer your data when you access the platform, create an account, utilize our gaming offerings, or enroll in the affiliate program. We comply with the General Data Protection Regulation (EU) 2016/679, the Austrian Data Protection Act (DSG), and all relevant national legislation. Our method is founded on transparency, integrity, and liability. We aim to inform you what data we gather, why we request it, what we use it for, and how you can stay in control of it at every stage. This document also functions as a detailed resource for affiliate partners, outlining how their data is managed within the LalaBet Casino affiliate programme. By using our services, you acknowledge that you have read and understood this policy.

Enforcing Your Privacy Rights

Under the GDPR, you enjoy a set of robust rights that enable you govern your private data. You are authorized to access the data we keep about you and to get a version in a organized, commonly used format. You can request us to fix incorrect or incomplete information without undue delay. In certain circumstances, you may demand that we delete your data, restrict its processing, or challenge to processing based on legitimate interests. You also have the right to data mobility for information you have given us, and you can retract your agreement for marketing or other consent-based processing at any time. To apply any of these rights, contact our Data Protection Officer at the email address provided in the contact section of our website. We will answer to your demand within one month. We will not charge a fee unless the request is clearly groundless or disproportionate. You also have the right to lodge a complaint with the Austrian Data Protection Authority if you think our processing breaches data protection law.

Legal Grounds for Data Handling

Any processing activity we perform is founded on a sound legal basis under Article 6 of the GDPR. The bases we rely on most often are the performance of a contract, compliance with a legal obligation, our legitimate interests, and your consent. When you register an account, processing your identity and financial data is necessary to perform the contract between you and LalaBet Casino. Identity verification and transaction monitoring are performed to comply with Austrian anti-money laundering laws and the conditions of our gambling licence. We may process usage data to improve our services based on legitimate interest, after a balancing test to make sure your rights are not overridden. For marketing communications and certain cookies, we depend on your freely given consent, which you can cancel at any time. When we process affiliate data for programme management, we usually rely on contractual necessity and legitimate interest, and we guarantee the processing is proportionate and does not infringe the rights of the data subjects involved.

Disclosing Data to External Partners

We share your personal data only with trusted third parties that assist us offer our services, and we do so under stringent contractual safeguards. These recipients include payment service providers that process deposits and withdrawals, identity verification and know-your-customer (KYC) providers that support us meet regulatory requirements, and IT infrastructure and hosting companies that keep our platform secure. We may also share data with our affiliate software platform to track referrals and determine commissions for affiliate partners. In every case, we restrict the data shared to what is essential for the third party to fulfill its function. We never sell your personal data to advertisers, data brokers, or any other commercial entity. We may also need to disclose information to Austrian regulatory bodies, law enforcement agencies, or courts in response to valid legal requests. We review each request thoroughly to ensure it is lawful and proportionate before we comply.

Recognizing Our Data Protection Promise

Privacy at LalaBet Casino is not an afterthought. It shapes every system, process, and partnership we uphold. Our privacy framework meets the standards set by Austrian regulators and the European krone.at Data Protection Board. Our Data Protection Officer oversees all processing activities and can address any questions you have about your rights at any time. We review our policies on a routine schedule, run data protection impact evaluations, and train our staff so personal data is treated with care. The same rigorous controls apply to our affiliate programme. We are transparent about the data we collect and the purposes for which we use it, and we never sell your personal information to third parties. Our goal is to create a safe, trustworthy environment where you can enjoy our entertainment options without endangering your privacy.

Global Transfers and Measures

As an online casino working in a global environment, some of our service providers and group companies may be situated outside the European Economic Area. When we move personal data to countries without an adequacy decision from the European Commission, we put in place appropriate safeguards to guarantee an equivalent level of protection. These safeguards include standard contractual clauses approved by the European Commission, binding corporate rules, and, where applicable, additional technical and organizational measures. We perform transfer impact assessments to verify that the law and practices of the destination country do not reduce the safeguards we apply. For Austrian users, this means your data remains protected by the same rigorous standards required by the GDPR, no matter where it is processed. We are forthcoming about the locations of our key processors and will give you more details about the specific safeguards applied to any particular transfer upon request.

Information Retention and Safeguards

We keep your personal data only for as long as required to fulfil the purposes for which it was collected, or as stipulated by Austrian law. Account data is typically kept for the length of your relationship with us and for up to ten years after account closure to meet anti-money laundering and tax retention requirements. Once the retention period ends, we safely remove or anonymize your data. To secure your information, we have established technical and organizational security controls. These encompass encryption of data in transit and at rest, strict access controls based on the principle of least privilege, regular penetration testing, and continuous observation of our systems for suspicious behavior. Our staff undergo ongoing privacy and security education, and we maintain a tested incident response plan. If a personal data breach poses a danger to your rights and freedoms, we will inform the Austrian Data Protection Authority without undue postponement and, where required, advise you directly.

Categories of Personal Data We Collect

To deliver our services and meet our legal obligations, we collect several groups of personal data. We obtain this information straight from you, as you interact as you interact with our website, and in some cases from trusted third parties. We gather only the data necessary for the purposes described in this policy. These types include:

• Identification and contact data: full name, date of birth, home address, email address, and phone number.
• Account-related and financial data: username, password, transaction history, deposit and withdrawal information, and payment method information.
• Technical and usage data: IP address, browser type, device identifiers, operating system, login times, pages visited, and game session logs.
• Validation and compliance data: copies of identification documents, proof of address, and self-exclusion or responsible gaming documentation.
• Affiliate data: affiliate ID, referral links, traffic sources, commission particulars, and marketing performance metrics.

We hold sensitive data to a minimum and never request political opinions, religious beliefs, or biometric data beyond what is strictly required for identity verification under Austrian anti-money laundering rules. Our approach maintains the collection restricted and focused. All data is handled according to the rule of data minimization.

Reasons for Handling Your Data

We process your personal data for a clearly defined set of objectives, each tied to a specific legal basis. The primary reason is to establish and administer your player account, carry out deposits and withdrawals, and deliver the gaming services you have requested under our terms and conditions. Without this operation, we could not satisfy our contractual obligations to you. We also use data to enhance our platform, customize your experience, and transmit relevant promotional offers if you have given clear consent. Complying with legal obligations is another key purpose; we confirm your identity, supervise transactions for suspicious activity, and retain records as required by Austrian gambling regulations and anti-money laundering directives. We also manage data to detect and prevent fraud, protect game integrity, and secure our systems. For the affiliate programme, we use affiliate data to track referrals, compute commissions, and enhance our marketing partnerships.

Personal Data Management in the Affiliate Programme

Our affiliate programme is a key part of the LalaBet Casino ecosystem, and we apply the same privacy standards towards affiliates as we do to players. When you join the affiliate programme, we gather the personal data you supply when registering, such as your name, contact details, payment information, and tax identification number. We additionally automatically capture data about traffic generated through your affiliate links, including click-through rates, registrations, and player activity metrics. These details is employed exclusively to manage the affiliate relationship, calculate and pay commissions, and improve our marketing efforts. We refrain from sharing your individual affiliate data with third-party affiliates or external parties for purposes unrelated to the programme. You maintain the same data subject rights as any other individual, encompassing the right to access, correct, and delete your information, depending on our legal retention obligations. We have concluded data processing agreements with our affiliate platform providers to make sure your data is processed lawfully and safely at all times.