The protection of personal data represents a fundamental part of all services delivered by Pinco Casino. Users situated in Poland engage with a platform that completely aligns its data retention methods with the General Data Protection Regulation and the Polish Act on the Protection of Personal Data. This policy outlines how long various categories of information are retained, the legal bases that justify each retention period, and the rights individuals have over their data. The approach is built on the principle of storage limitation, implying no record is kept beyond necessary for its initial business or legal purpose. Regulatory obligations pertaining to anti-money laundering, responsible gambling, and tax reporting directly determine retention schedules. The same meticulous care applies to the data generated through the Pinco Casino affiliate programme, guaranteeing partners benefit from the same open and lawful handling. A dedicated team consistently reviews these practices so that every user, whether a player or an affiliate, can engage with clear expectations about how their information is handled.
Licensing System and Authorizations
Pinco Casino operates under a gaming licence granted by the regulatory authority of Curaçao, a jurisdiction that applies strict data protection obligations on its licensees. For users entering the platform from Poland, the licence conditions are supplemented by mandatory compliance with the European Union’s data protection regime. The GDPR functions as the primary legal foundation, while specific Polish data protection legislation provides further refinements regarding the retention of personal information. Under this dual framework, all personal data processing must satisfy at least one lawful basis, such as contractual necessity, legal obligation, legitimate interest, or explicit consent. Retention periods are directly connected to those bases. For example, data processed to perform the player contract is kept for the duration of the relationship plus applicable limitation periods for potential claims. In contrast, records tied to anti-money laundering directives are kept for a minimum of five years after the last transaction, following statutory mandates that override shorter user preferences. This layered legal structure guarantees that data is neither disposed of prematurely, risking non-compliance, nor held indefinitely without justification.
Affiliate Programme Data Storage and Agreements
Pinco Casino considers affiliates as business partners whose data processing demands combine contractual performance with privacy obligations. Upon signing up for the program, an affiliate authorizes to the acquisition of work-related data, tax IDs, and billing data. The provisions of the affiliate agreement specify the storage timeline: all personal data linked to the collaboration is stored for the length of the deal, and for half a decade after its end to fulfill tax audit periods. During this storage period, affiliates can demand an export of their earnings history and performance data. The platform also processes summarized partner data that links an affiliate to user behavior, but never discloses personal player information to the affiliate. Cookie-based tracking data used to assign new accounts follows a significantly shorter storage period, commonly expiring thirty days after the most recent click, guaranteeing that privacy-by-design principles are integrated into the tracking systems that affiliates trust.
Individual Rights Under GDPR and National Legislation
Right of Access and Rectification
Every user in Poland possesses the right to get confirmation whether Pinco Casino processes their personal data and to receive a copy of that data in a structured, commonly used format. Addressing such access requests is a priority, and the dedicated data protection team strives to provide the information within the regulatory one-month period. Where requests are complex, this period may extend by two further months with clear communication to the individual. Besides access, the right to rectification permits individuals to rectify inaccurate or incomplete data without unnecessary delay. This is especially relevant when identity documents are expired or when a player requires updating a registered payment instrument. The platform has incorporated a self-service portal that enables immediate rectification of contact details, while more sensitive changes related to financial identity initiates a verification step to prevent fraudulent alteration attempts.
Erasure Right and Limitation
The right to erasure, often termed the right to be forgotten, is upheld by Pinco Casino once the grounds outlined in Article 17 of the GDPR are fulfilled. If the data ceases to be necessary for the original purpose, consent is withdrawn, or the processing was unlawful, deletion requests are performed with urgency. However, this right is not unlimited. Where legal obligations such as anti-money laundering regulations mandate continued storage, the erasure request culminates in restriction of processing rather than full deletion. During a restriction period, data stays stored in a secure and access-restricted archive but is not used for any other purpose. Users are informed of the particular legal provision overriding their request, along with the projected date when erasure will become feasible. This clear balancing of rights and duties reassures individuals that valid regulatory requirements do not become an excuse for endless data accumulation.
Storage Durations for Different Data Types
Active Account Data
While a user account remains active, all personal details, gaming history, promotional interaction records, and gaming restrictions are retained in real-time databases. This continuous availability enables the platform to offer customized experiences, apply deposit limits, and show correct account figures. The moment an account enters dormancy or a user asks for deletion, the condition of the data shifts into a controlled status. Nevertheless, the retention clock does not begin right away removing everything. Pinco Casino implements a formal waiting phase before complete erasure begins, mainly to protect from dishonest sign-ups and refund requests. Throughout this waiting period, promotional messages stop instantly if consent is withdrawn. The relationship between active and closed states of data demonstrates how data timelines are not monolithic but change according to the changing need and statutory obligation tied to each information class.
Correspondence and Assistance Data
Records from live chat sessions, email exchanges, and recorded telephone conversations with customer service staff are stored for a lesser time versus monetary data. These records are utilized to address complaints, enhance customer support, and show adherence with responsible gambling interactions. The usual storage period for support communications is eighteen months from the date of the final contact barring a particular instance is identified for a longer hold due to an active dispute or regulatory inquiry. After this duration, the material is deleted through systematic removal routines that eliminate attachments, message contents, and data about data from the CRM platform. Audio files are managed with the same timeline, and customers are informed about the audio capture at the start of each interaction. By storing sensitive conversational data only as much as it serves a clear quality assurance or regulatory justification, Pinco Casino lowers excessive risk.
Policy Updates and Notification Processes
The environment in which Pinco Casino works develops through new regulatory requirements, technological changes, and shifts in business operations. Consequently, the data retention policy undergoes routine review at least once per calendar year, with interim updates prompted by important legal updates or service changes. When an revised version is introduced, all users from Poland with an active account receive direct notice via the e-mail address recorded in their profile at least fourteen days before the updates take effect. For terminated accounts that still have stored data, a notice is posted on the official website and sent through any available communication channel where permitted by law. The revision history is thoroughly documented, and past versions of the policy remain reachable upon inquiry. Customers bound by significantly different storage periods are given the possibility to enforce their entitlements before the updated policy takes effect, making sure that no user is caught by surprise by an extended storage term they did not anticipate.
Types of Personal Data Kept
Member Identity and Authentication Data
To satisfy mandatory know-your-customer protocols, Pinco Casino keeps versions of government-issued identification documents, proof of address, and payment method verification records. This category covers full name, date of birth, nationality, and the visual elements of uploaded files. The keeping of such sensitive information follows the legal obligation basis under anti-money laundering legislation. Even after account closure, identity documentation commonly remains archived for a duration of five years, reflecting the standard demanded by financial regulatory authorities. During this time, access is strictly restricted to compliance and fraud prevention units. After the retention window ends, digital files and associated metadata are permanently removed from live systems and backups in a manner that prevents reconstruction. The platform never uses this verification data for marketing purposes, preserving a strict division between regulatory files and commercial data.
Monetary and Deal Records
Any deposit, withdrawal, bonus adjustment, and wagering activity creates a financial record that represents part of the permanent audit trail. Such data includes transaction identifiers, amounts, currency, payment method details, and timestamps. Polish tax law, combined with EU anti-money laundering directives, obligates the operator to keep these records for a minimum retention period that goes beyond the closure of a player account. Typically, the retention term is at five years from the date of the last financial movement, though records caught in a dispute or legal claim are held until resolution plus an additional safeguarding period. This extended storage assures that Pinco Casino can reply to requests from tax authorities, law enforcement agencies, and financial intelligence units without delay. No transaction data is sold or repurposed for secondary profiling, and automatic anonymisation processes start immediately once the statutory retention obligation lapses.
Affiliate Programme Data
The associate scheme produces a separate data set that comprises the partner’s business name, tax identification number, payment instructions, performance metrics, and records of referred players in hashed form https://pinco.net.pl/legal-and-affiliates/. Affiliate agreements are treated as business documents, so their retention is controlled by both commercial law and tax reporting requirements. Pinco Casino stores full partnership records for the duration of the active agreement plus five years after termination. During this period, the affiliate holds the right to access historical commission reports and payment ledgers. Usage data tied to affiliate tracking links stays stored for a shorter interval consistent with cookie consent durations, after which it is combined and stripped of identifiers. This balanced approach preserves the legitimate interest of the affiliate in verifying past earnings while respecting the privacy of referred players whose individual activity becomes unidentifiable after the cookie window ends.
Data Safeguards Safeguarding Retained Data
Technological Protections
All retained data, regarding Polish players or global affiliates, is shielded by a multi-tiered security framework. Storage encryption using AES-256 standard protects databases and backup storage, while all transmitted data is secured through TLS protocols. The network perimeter is overseen by intrusion detection systems that identify abnormal access patterns, and vulnerability scans are conducted on a recurring schedule. Data masking approaches are applied to data sets used in testing environments, guaranteeing that development and quality assurance processes never expose live personal information. Retrieval of archived data is strictly role-based, with multi-factor authentication required for any retrieval attempt by staff. Logs of every administrative data access event are also stored and audited to detect potential misuse. These technical controls are regularly evaluated against evolving threats, with regular penetration testing conducted by independent security firms to validate the resilience of the storage infrastructure.
Organizational and Personnel Measures
Systems alone cannot guarantee data safety; consequently Pinco Casino establishes comprehensive organisational measures. All employees participate in mandatory data protection training during onboarding and participate in annual refresher sessions that include retention schedules, breach reporting procedures, and the specific requirements of handling Polish user data. Internal policies enforce the principle of least privilege, granting data access only to roles whose functions strictly require it. A designated Data Protection Officer manages compliance, performs periodic retention audits, and acts as the point of contact for supervisory authorities. Any detected data breach is promptly assessed, documented, and notified to the relevant regulator and affected individuals within the legally mandated 72-hour window where a risk exists. Vendor agreements with cloud storage and backup providers include strict data processing addenda that restrict retention to instructed periods, making certain that third parties do not hold copies of personal data beyond the necessary term.
Scope of the Data Storage Policy
The policy governs all personal data obtained from two distinct groups: registered players with active or closed accounts within the Pinco Casino environment, and individuals participating in the Pinco Casino affiliate programme. It includes information supplied during registration, documents furnished for identity verification, transaction logs, communications with customer support, and technical data created by browsing activity. For affiliates, the policy regulates contact details, payment information, traffic statistics, and any contractual correspondence that emerges during the partnership. Data gathered through cookies and similar tracking technologies is also included, with retention aligned to the specific purposes of analytics and marketing consent. Importantly, the policy does not extend to anonymised or aggregated data from which individuals can no longer be recognised. Such statistical material may be stored indefinitely because it falls outside the definition of personal data under GDPR. By defining this scope with precision, Pinco Casino ensures that all parties know exactly which categories of information are subject to documented retention rules and which fall outside regulated processing.
FAQ
What is the main legal basis for retaining my personal data?
Pinco Casino uses a combination of legal grounds such as contractual necessity for delivering gaming services, regulatory requirements under anti-money laundering and tax laws, and legitimate interests for fraud prevention. Consent is employed for marketing communications and certain cookies, and it can be retracted at any time without affecting the legality of processing based on other grounds already in progress.
May I ask for the immediate removal of my complete player data?
You are able to file a deletion request at any time, and Pinco Casino will assess it quickly. That said, if particular files are bound by a legal retention requirement, they may not be removed immediately. In such cases, the processing of those records is restricted so they are kept safely but not utilized for other purposes until the obligation expires.
What is the retention period for ID documents after closing an account?
Government-issued identity documents and proof of address are typically retained for five years following account closure to meet anti-money laundering regulations. After this period, digital copies are permanently destroyed from active systems and backups. Only compliance personnel with a clear necessity have access to these files during the holding timeframe.
Is data from the affiliate program included in this policy?
Yes, the data retention policy fully covers affiliate partners. Personal and payment information linked to an affiliate account is kept for the duration of the partnership and five years after termination to meet tax and commercial record-keeping requirements. Aggregated referral statistics without personal identifiers may be retained longer for business analysis.
How is my data handled after extended inactivity?
After a specified dormancy period defined in the terms, your account may be marked as inactive. Data remains stored but is moved to a restricted-access environment. Marketing communications cease, and the clock for final deletion begins once any overriding legal obligations expire. You can reactivate your account within that window by completing a verification process.
Do I receive a warning before data deletion?
Not in every scenario. If deletion occurs because the retention period has naturally expired, automated processes remove data without prior individual notification. However, if Pinco Casino decides to delete data earlier for policy reasons, or when responding to a justified erasure request, a confirmation of deletion is sent to the registered email address once the operation completes.
How are backup copies handled after data deletion?
After a deletion request is processed or a retention period ends, data is erased from production databases immediately. Backup tapes and cloud snapshots are renewed in a cyclical manner, and personal data within those backups is made unreachable once the main deletion is executed. Backup media are thoroughly updated according to a documented schedule to stop lingering data from remaining.
Leave a Reply