MYCASINO’S PRIVACY POLICY
Valid from 10 August 2026
Your trust is important to us!
You’re playing it safe by gaming on mycasino. We respect your privacy and our top priority is to protect your data.
This privacy policy outlines what data we collect, why we collect it and how we further process it. Personal data is all information relating to an identified or identifiable natural person (such as your surname, first name, address, email, date of birth or phone number). Processing encompasses all handling of personal data (such as storage, transfer, procurement, deletion or retention).
The privacy policy forms a binding part of mycasino’s General Terms and Conditions. It explains how we process personal data in connection with the gaming platform, the mycasino app, the Player's account and the related services. Where we require your consent for specific processing activities, we will obtain it separately. Please therefore read this Privacy Policy carefully.
If you provide us with personal data relating to other people (such as family members), please ensure that those people are aware of this privacy policy and only provide us with their personal data if you are permitted to do so and if the personal data is accurate.
By accessing the gaming platform, the mycasino app and the related services, you agree to the following provisions. If you do not agree to these provisions, please refrain from accessing the website.
1. GENERAL INFORMATION
Grand Casino Luzern AG (hereinafter referred to as "GCL" or "the Organiser") has set itself the goal of providing the users (hereinafter referred to as "the Player") with a safe and socially acceptable, personalised online gaming experience. To be able to offer the range of games on the mycasino.ch website (hereinafter referred to as the "gaming platform") and the associated services, the Organiser must process the Player’s personal data. The Organiser protects the Player’s privacy and undertakes to protect their personal data.
The privacy policy applies to the gaming platform, the full range of games on offer and the associated services. Subject to the provisions set forth below and to a certain extent, the Organiser offers the Player the opportunity to control how the Organiser collects, uses and disseminates personal data in accordance with this privacy policy, the cookie policy and the settings available in the player account.
The Organiser complies with Swiss legislation, particularly the applicable laws and regulations concerning data protection, and especially the Swiss Federal Act on Data Protection (FADP). The Organiser is also certified by the "GoodPriv@cy®" and "ISO/IEC 27001 Information Security Management System" labels.
2. DATA CONTROLLER
Grand Casino Luzern AG is responsible for collecting and processing personal data. Grand Casino Luzern AG’s Data Protection Officer is also available to the Player as a contact for matters related to data protection.
Grand Casino Luzern AG (Commercial register no. CHE-108.361.212) Haldenstrasse 6 6006 Lucerne Switzerland Email: info@grandcasinoluzern.ch Tel.: +41 (0)41 418 56 56
Data Protection Officer
Grand Casino Luzern AG Haldenstrasse 6 6006 Lucerne Switzerland Email: datenschutz@grandcasinoluzern.ch Tel.: +41 (0)41 418 56 56
3. LEGAL BASES FOR DATA PROCESSING AND DATA TRANSFER
As a licensed Swiss casino, the Organiser is particularly subject to the following Swiss laws and ordinances concerning gaming that require the casino to collect and process personal data:
Federal Act on Gambling (Gambling Act, GamblA)
Ordinance on Gambling (Gambling Ordinance, GamblO)
FDJP Ordinance on Casinos (FDJP Casinos Ordinance, CO-FDJP)
Federal Act on Combating Money Laundering and the Financing of Terrorism (Anti-Money Laundering Act, AMLA)
Ordinance of the Federal Gaming Board on the Diligence of Casinos in Combating Money Laundering (FGB’s Anti-Money Laundering Ordinance, AMLO-FGG)
To fulfil its legal obligations, and particularly to protect the Player from excessive gaming and to combat crime and money laundering, the Organiser processes the following data and may disclose the same to the supervisory authority:
Data collected during the Player’s online registration.
Data about the Player’s gaming behaviour and financial transactions.
Data about the Player’s personal, professional and financial situations.
Data about the Player’s suspension.
Player data is transferred in pseudonymised form to a data recording system located in Switzerland, which provides the Player data for the supervisory authority. See Para. 5 for the data retention duration.
If we ask for your consent to certain types of processing, we will provide you with separate information about the purposes of that processing. If you have consented to the processing of personal data for specific purposes, we will process your personal data within the scope and on the basis of that consent, unless we have another legal basis and we require such a basis. You can withdraw consent at any time with future effect by sending us a notification in writing (by post) or, unless indicated or agreed otherwise, by email; you will find our contact details in Para. 2 of this privacy policy.
To withdraw your consent to the use of non-essential analytics, marketing or tracking technologies, you may, where available, use the cookie, privacy or communication settings on the website, in the mycasino app or in your Player's account. You may also notify us of your withdrawal by email using the contact details set out in Section 2. Once we have received your withdrawal, we will no longer process your data for the purposes to which you consented, unless another legal basis exists for such processing.
4. COLLECTION AND PROCESSING OF PERSONAL DATA
4.1. Data that the Player provides to the Organiser
The Organiser collects personal data that the Player provides to the Organiser in connection with the player account. To be able to use the range of games on offer, the Player must have a player account on the gaming platform.
When opening a player account, the Player must provide personal information about themselves (first name, surname, date of birth, sex and nationality) and their residential address (street, postcode, town/city, country).
In the context of converting their account from a temporary player account to a final one, the Player will be asked to provide a copy of an official identification document (passport, identity card, driver’s licence) and proof of residence (e.g. bank/postal account statement or electricity, water, landline bill) to verify the personal details and residential address provided.
The Organiser collects the personal data that the Player provides to the Organiser for administration of the gaming platform, including the processing of payment transactions.
The Player will also provide the Organiser with data if they contact the Organiser, take part in the Organiser’s activities or otherwise transfer data to the Organiser.
The Organiser is entitled to demand salary statements, proof of assets or tax documents from the Player in order to fulfil the legal obligations to combat money laundering and the financing of terrorism or to be able to implement early detection measures to identify a possible gaming addiction.
4.2. Data that the Organiser collects from other sources
In addition to the data that the Player provides to the Organiser, the Organiser may collect and/or update personal data from third parties (e.g. public registers, credit agencies, subcontractors).
The data that the Organiser collects through third parties includes:
Identification details such as the first name, surname, date of birth and residential address details to ensure that the information provided by the Player is correct.
Data from game providers indicating whether the Player has committed fraud or otherwise breached the General Terms and Conditions, bonus regulations, game rules or applicable laws in the past. The Organiser also collects data on the Player’s playing behaviour, including segmented data, and profile data.
Data that the Organiser must check by law, e.g. to determine whether the Player is a politically exposed person in the context of the Federal Act on Combating Money Laundering and the Financing of Terrorism.
Data to prevent fraud, other criminal offences and improper conduct against the Organiser and/or other players. This includes checking devices connected to the internet to assess the risk of fraud and to determine whether fraudulent behaviour has occurred in the past.
4.3. Data that the Player generates through using the gaming platform
The Organiser collects data resulting from the use of the range of games on offer, including transactions to and from the player account. This means that the Organiser stores and processes data about how the Player uses the gaming platform. This information includes, for example, games that the Player plays, the services used, the promotions used, the events attended, the payment transactions made from/to external payment providers and correspondence between the Player and the Organiser.
4.4. Processing of Data When Using the mycasino App
When you use the mycasino app for iOS and Android, we additionally process technical data relating to the use of the app and your device. This may include, in particular, device and app information, the operating system and app version, language settings, IP address, device identifiers, login and security events, session and usage data, crash and diagnostic data, as well as information about the use of individual features. We use this data to provide and secure the app, analyse errors, prevent fraud, comply with regulatory requirements, improve the app and, where permitted by law or in accordance with the Player's settings, for analytics and marketing purposes.
5. PURPOSE OF PERSONAL DATA PROCESSING
5.1. Purpose: player account registration
Processing is necessary so that the Player can open a player account with the Organiser. The full range of games on offer requires the Player to register for a player account on the gaming platform.
Legal basis: Player account – If you want to have access to an online range of gaming entertainment, you need to create a player account with the Organiser (Art. 47 GamblO).
5.2. Purpose: identity/address verification
To ensure that the Player exists and is a resident of or has their habitual abode in Switzerland, the Player’s details are checked with credit agencies when the player account is opened and a copy of an official identification document or an electricity, water or landline bill in the Player’s name is requested from the Player.
Legal basis:
Fulfilment of legal obligations – Personal data needs to be collected and processed to enable the Organiser to fulfil its legal verification obligations (Art. 47 et seq. GamblO).
5.3. Purpose: management of the range of games on offer and the Player’s data
Processing is necessary to provide the range of games on offer, including the transfer of funds between the player account, accounts held with external payment providers and the Organiser’s bank accounts, to manage customer funds and to manage the Player’s data. Data processing is also necessary to maintain the customer relationship between the Player and the Organiser.
Legal basis:
Compliance with legal due diligence obligations – Processing is necessary to fulfil one or more of the Organiser’s legal obligations (Arts. 3 and 13 AMLO-FGG).
5.4. Purpose: provision of an individual and personalised range of games
Processing is necessary to provide the Player with personalised content on the gaming platform, as well as specific offers and similar promotions.
5.5 Purpose: delivery and provision of good-quality customer service
The Organiser offers customer services by chat, email and phone. The Organiser uses the information that the Player provides to resolve problems and to investigate and respond to complaints concerning the gaming platform. The Organiser also records conversations with customers in accordance with the statutory regulations. Customers are given prior notice of the recording and can terminate the conversation at any time.
Legal basis:
In the event that a person who is not a customer contacts the Organiser’s customer service, processing is based on legitimate interests. Processing is necessary to protect the Organiser’s interests and the Player’s interests with regard to clarifying the matter.
5.6. Purpose: prevention of misuse of the gaming platform, plus prevention and investigation of violations against the Organiser and/or the Player
Processing is necessary to prevent and investigate fraud or other criminal offences. Processing is also necessary to prevent and investigate a) attempts to illegally log into player accounts, or b) other actions that are prohibited by law or the agreement between the Player and the Organiser and by the Organiser’s or the game provider’s game rules. Processing is also necessary to provide a safe gaming experience, to improve and further develop the Organiser’s IT environment and to protect the Player and their player account from attacks and intrusion.
Legal basis:
In cases where processing is not necessary to fulfil the agreement between the Player and the Organiser, such processing is based on a legitimate interest in protecting the gaming platform from misuse and violations against the Organiser or the Player.
5.7. Purpose: responsible gaming
Protecting the Player from gaming addiction and from making bets that are disproportionate to their income and assets.
Compliance with legal and regulatory requirements.
Offering functions and services that help the Player to control their gaming behaviour.
The Organiser processes personal data if the Player uses the following features and offers: Functions and services provided by the Organiser to allow the Player to make informed decisions about their gaming behaviour, such as deposit limits, temporary withdrawal from gaming or reminders regarding their own gaming activity. Questionnaires and/or self-tests and financial documents may be requested by the Organiser to obtain the necessary information to comply with legal obligations. The Organiser also processes data resulting from the use of the range of games on offer, including profiling of gaming behaviour, to identify, combat and prevent problematic gaming and to comply with legal obligations. The Organiser also processes personal data to ensure that the Player is not registered in a suspended persons register (veto register) and to respond to requests if the Player wishes to be excluded from the gaming platform. The Organiser is legally obligated to suspend a Player if it is suspected that the Player in question is insolvent, does not meet their financial obligations or takes risks by making bets that are disproportionate to their income and assets. The Organiser processes anonymised data to evaluate the effectiveness of the measures taken and to conduct research in the field of preventing addiction.
Legal basis:
Processing is necessary to fulfil one or more of the Organiser’s legal obligations (Arts. 76 to 81 GamblA and Arts. 87 to 91 GamblO). In cases where there is no legal obligation, the processing is done to protect the Player and is based on the Organiser’s legitimate interest in responsible gaming.
5.8. Purpose: management of events and other occasions, promotions, competitions and tournaments, including travel and award ceremonies
The Player has the opportunity to take part in promotions, competitions, tournaments and events organised by the Organiser. For the Player and any accompanying person to take part in these activities, their personal data needs to be processed to manage participation.
5.9. Purpose: marketing of the range of games on offer
The Organiser processes personal data to advertise its products, services and promotions as well as events. The Organiser also processes personal data through what is known as "profiling" to propose tailor-made offers and marketing measures to the Player. The Player may waive their right to receive personalised offers generated through the creation of profiles by changing their personalised marketing settings in their player account at any time. In the player account, the Player can also choose what communication channels they want to use to receive personalised offers.
Legal basis:
Legitimate interest – Processing is based on a legitimate interest in marketing the range of games on offer, including various events organised or sponsored by the Organiser.
5.10. Purpose: communication
The Organiser communicates with the Player through various communication channels such as email, mobile phone, gaming platform notifications, messages to their gaming platform inbox and other similar channels. Messages from the Organiser may contain information about the Organiser, about the availability and security of the gaming services, and also reminders and marketing announcements from the Organiser and its business partners. The Player can change their communication settings in their player account at any time. It must be noted that the Player may not unsubscribe from the Organiser’s service notifications containing customer information, safety notices and legal notices.
Legal basis:
Contract performance – Some notifications are necessary to enable the Organiser to meet its obligations under the agreement between the Player and the Organiser, such as the obligation to provide information on security and legal matters. Legitimate interest – Some notifications are based on a legitimate interest in being able to send information about the Organiser, its products and services, as well as its promotions.
5.11. Purpose: further development of the range of games on offer and conducting surveys as well as performing business analyses and statistical calculations
Processing is necessary to further develop and improve the range of games on offer and to make them user-friendly for the Player. Among other things, the Organiser analyses the usage behaviour of the range of games on offer to be able to take measures for improvement and development.
Legal basis:
Legitimate interest – Processing is based on a legitimate interest in improving and developing business activities, including the range of games on offer, and the interest in providing players with a user-friendly range of games.
5.12. Purpose: veto list (suspension)
If a Player would like to be suspended or has to be suspended for gaming, their personal data is added to a veto list. This list must also be consulted by other Swiss casinos and lotteries.
Legal basis:
Compliance with legal due diligence obligations – Processing is necessary to fulfil one or more of the Organiser’s legal obligations (Arts. 76 to 82 GamblA and Arts. 87 to 91 GamblO).
5.13. Purpose: fulfilment of the Organiser’s legal obligations in general
Processing is necessary to fulfil the Organiser’s obligations under law and the jurisdiction of courts and authorities. The Organiser is obligated to comply with the applicable laws, e.g. ensuring safe and transparent gaming operations, providing protection against gaming addiction, preventing crime and combating money laundering and the financing of terrorism.
Legal basis:
Compliance with legal obligations – Processing is necessary to fulfil one or more of the Organiser’s legal obligations.
5.14. Processing for other purposes
In principle, personal data is only processed for the purposes for which it was collected. However, personal data may also be processed for other purposes if they are compatible with the original purposes or if doing so is necessary for legal reasons.
6. DURATION OF DATA STORAGE
The Organiser does not store data for longer than is necessary for the stated purposes. In principle, the Organiser stores personal data for up to three years following termination of the customer relationship to comply with legal requirements and to support the Player if necessary and ensure business continuity if the Player returns to the Organiser. The data is then deleted or anonymised so that it can no longer be linked to the Player as a person. However, the Player may request that the Organiser anonymise their personal data earlier if the customer relationship is terminated and the Organiser does not need the personal data to comply with its legal obligations.
Depending on the purpose or the existing legal retention and documentation obligations, the Organiser may store personal data for less than three years following termination of the customer relationship. For example, the Organiser may store personal data if the Player has taken part in events, promotions, competitions or tournaments, including travel and award ceremonies, until such time that the same have been completed and the follow-up to the event in question has been completed.
The Organiser must also store some of the personal data for longer than three years following termination of the customer relationship to comply with legal, official and/or licensing conditions. For example, the Organiser is obligated to retain some of the personal data for an indefinite period of time if it relates to a voluntary or ordered suspension from gaming. A retention period of ten years following termination of the customer relationship applies to data relating to combating money laundering and the financing of terrorism (Art. 21 AMLO-FGG). This data includes:
List of all identified players
Copies of identification documents
Documentation relating to registered transactions
Players’ declarations of the beneficial owner
Documentation and notes relating to the results of specific clarifications
Documentation and notes relating to risk classification and to the results of the use of the risk characteristics
In such cases, the Organiser processes only those parts of the personal data that are required for these specific purposes.
The Organiser may also process personal data for more than three years following termination of the customer relationship if the personal data is involved in ongoing legal proceedings.
All documentation relating to reported money laundering is kept for five years following the reporting date and then immediately destroyed.
If customer conversations are recorded, the Organiser stores such recordings for 90 days.
In the event that the Player does not wish to receive information about the Organiser’s marketing activities or revokes their consent, the Organiser will stop processing personal data for this specific purpose.
7. AUTOMATED DECISIONS FOR INDIVIDUAL PLAYERS
We process your personal data in a partially automated manner in order to analyse certain personal aspects (profiling). We use analytics tools that enable us to tailor our communication and advertising to your needs.
We will notify you separately when if we use such processes in individual cases, insofar as it is required by law, and inform you of the associated rights.
To comply with the legal requirements, the Organiser checks some of the personal data and makes automated decisions on the basis of these checks. This also includes decisions concerning the Player’s right to use the games that the Organiser has on offer.
The Organiser applies other automated decisions regarding responsible gaming, which may include blocking players or transactions in the player account. The aim of these decisions is to prevent problematic gaming, identify gaming problems and draw the Player’s attention to their gaming behaviour.
The Organiser may also terminate a customer relationship or block a player account if a Player is inactive and it is likely that the Player in question will not use the range of games on offer.
Where an automated individual decision within the meaning of the applicable data protection laws produces legal effects concerning the Player or similarly significantly affects the Player, we will inform the Player accordingly. In such cases, the Player may, in accordance with the applicable law, express their point of view and request that the decision be reviewed by a natural person.
8. DISCLOSURE AND TRANSFER OF PERSONAL DATA
8.1. Disclosure of personal data
The Organiser processes personal data in strict confidence and only discloses personal data in accordance with this privacy policy. The data will only be disclosed to persons who are entitled to process personal data and who have undertaken to maintain confidentiality or are subject to the corresponding legal confidentiality. Otherwise, the Organiser only discloses personal data to third parties if the Player has agreed to this.
The Organiser must disclose personal data if it is obligated to do so due to laws, requirements or the prompting of an authority (e.g. police, public prosecution department), which may also include disclosing the data in cases where the Organiser suspects that a criminal offence has been committed.
8.2. Processors / Data Processors
For the provision, operation, maintenance, security and further development of the gambling offering, the Organiser works with processors. Processors are companies that process personal data on behalf of and in accordance with the instructions of the Organiser.
The Organiser engages, in particular, the following categories of processors:
Game providers, in order to offer a wide range of games.
IT, hosting, platform and app service providers, which provide IT solutions, infrastructure, software, interfaces, technical operation services, maintenance, support, security, diagnostic and analytics services for the gaming platform and the mycasino app.
Customer Service and communication service providers, where they provide services on behalf of the Organiser in connection with customer enquiries, service notifications or communications via the gaming platform or the mycasino app.
Providers of payment solutions, such as banks, acquirers and other payment service providers, to the extent that these companies do not act as independent controllers.
Providers of fraud prevention and detection services and services relating to the detection and prevention of other criminal offences, abuse or other unlawful conduct.
Providers of analytics, marketing or advertising services, to the extent that they process personal data on behalf of and in accordance with the instructions of the Organiser.
Personal data is disclosed to processors only for purposes consistent with those described in this Privacy Policy, in particular for the provision, operation, security, maintenance, error analysis, fraud prevention, regulatory documentation and improvement of the gambling offering and, where permitted by law or in accordance with the Player's settings, for analytics and marketing purposes.
The Organiser carefully selects its processors and contractually ensures that they implement appropriate technical and organisational measures to protect personal data. Processors may process personal data only in accordance with the documented instructions of the Organiser, only for the agreed purposes and only while maintaining confidentiality. The engagement of sub-processors is permitted only with the prior approval of the Organiser. The Organiser also requires its processors to comply with the applicable requirements relating to data security, confidentiality, the deletion or return of data, assistance with data subject rights and any applicable requirements relating to cross-border disclosures of personal data.
8.3. Within the Organiser’s group of companies
For the purposes described in this privacy policy, personal data may be transferred to the Organiser’s parent company, affiliates and subsidiaries. Disclosure of personal data within the Organiser’s group of companies primarily serves to manage personal data and process various matters in connection with the range of games on offer.
8.4. Other companies (independent data controllers)
The Organiser discloses personal data to other companies that the Organiser cooperates with but which do not act as data processors. This means that these companies, being what are known as "independent data controllers", decide for themselves how personal data is processed. The Organiser discloses personal data to the following companies that are responsible for the personal data themselves:
Companies that offer payment solutions, such as banks, acquirers and other payment service providers.
Companies that offer booking services for travel, airlines, hotels, etc.
Companies that award prizes to players for taking part in an event/activity organised by the Organiser.
Certain game providers that deliver games to the gaming platform.
The Organiser transfers anonymised data to research institutes to contribute to research in the field of preventing gaming addiction.
In cases where personal data is disclosed to a company that processes personal data independently of the Organiser, the respective company’s privacy policies and regulations concerning the handling of personal data apply.
For further information about the companies that process personal data independently of the Organiser, the Player may contact the Organiser or the following authority: Independent data controllers.
8.5. Transfer of personal data
The Organiser attaches the highest importance to data protection. The Organiser's data protection management has been awarded the internationally recognised GoodPriv@cy® quality seal, which is granted for exemplary implementation of data protection standards. In line with the Organiser's high quality standards, personal data is processed primarily within Switzerland, the European Union (EU) and the European Economic Area (EEA). As a priority, personal data is processed using the Grand Casino Luzern AG's data centre in Switzerland and a data centre located within the EU.
Personal data may also be disclosed to recipients abroad or processed by service providers located abroad, in particular where this is necessary for the provision, operation, maintenance, security, further development or support of the gaming platform, the mycasino app, the gambling offering or the related services. This applies in particular to processors, sub-processors and providers of IT, hosting, platform, app, support, security, analytics, communication, payment and other services.
Where personal data is disclosed to countries, territories, specific sectors within a country or international organisations for which the Swiss Federal Council has determined that an adequate level of data protection exists, such disclosure shall be based on that adequacy decision. This applies in particular to Member States of the European Union and the European Economic Area.
Where personal data is disclosed to recipients in countries that do not provide an adequate level of data protection, the Organiser shall ensure an adequate level of protection by implementing appropriate safeguards. Such safeguards include, in particular, Standard Contractual Clauses recognised by the Swiss Federal Data Protection and Information Commissioner, other contractual safeguards provided for by law, approved binding corporate rules or other safeguards permitted under the applicable data protection laws.
For disclosures of personal data to the United States of America, an adequate level of data protection exists only where the receiving organisation is certified under the Switzerland–U.S. Data Privacy Framework. Where this is not the case, the Organiser shall rely on appropriate safeguards or another exception provided for by law for any such disclosure.
Where processors or other service providers engage sub-processors, the Organiser contractually ensures that such sub-processors also comply with the applicable requirements relating to data protection, data security, confidentiality and cross-border disclosures of personal data. The Organiser also implements appropriate technical and organisational measures to protect personal data against unauthorised access, unauthorised disclosure, loss, misuse or any other unlawful processing.
9. RIGHTS OF PLAYERS AND OF DATA SUBJECTS
9.1. Rights of access
The Player is entitled to access their personal data that the Organiser processes about the Player. However, the Player’s access rights assume that a) such personal data does not jeopardise the rights and freedoms of third parties, b) access to personal data is not prohibited by legal provisions such as the Federal Act on Combating Money Laundering and the Financing of Terrorism, and c) the information does not jeopardise the outcome of a criminal or other investigation. In cases where it receives a request for information, it must be noted that the Organiser may request further information from the Player to guarantee effective processing of the request and disclosure of the data to the correct person.
9.2. Right to rectification and amendment
The Player has the right to have any incorrect personal data rectified and any incomplete personal data amended within the stated purpose. To do so, the Player contacts the Organiser’s Customer Service department and requests that the relevant rectification or amendment be made.
9.3. Right to be forgotten
The Player has the right to request that the Organiser erase or remove all or part of their personal data, e.g. if the personal data is no longer required for the purposes for which it was collected or was processed in another way.
It must be noted that the Organiser can reject the request to erase or anonymise the personal data if processing is carried out based on legal obligations applicable to the Organiser such as the Federal Gambling Act or the Federal Act on Combating Money Laundering and the Financing of Terrorism. The Organiser may also reject the request for erasure and anonymisation of the personal data if it has a legitimate interest in processing or if the Organiser requires such personal data to establish, assert or defend legal claims.
9.4. Right to restriction of processing
Under certain conditions, the Player has the right to request that the processing of their personal data be restricted. This may be the case, for example, if the Player disputes the accuracy of the personal data or the processing is unlawful and the data subject refuses erasure of the personal data and instead requests that use be restricted.
The Organiser is entitled to continue to store and process personal data for the duration of the restricted processing asserted by the Player to establish, assert or defend legal claims or to protect the rights of other natural or legal persons. The Organiser can also process this data if the Player has given their consent or if public interests require that this be done.
9.5. Right to object
The Player has the right to object to certain types of processing, e.g. the processing of personal data for direct marketing and other types of processing, if the Organiser has no legitimate interest in this regard.
The Player can choose which communication channels the Organiser may use to send advertising to the Player using the settings in their player account. If the Player does not wish to receive such notifications, the Organiser will stop sending such information to the Player and stop processing personal data for this purpose.
The Organiser may continue its processing of personal data that has been objected to if it asserts due cause or if the Organiser’s interests take precedence over the Player’s interests until such time that the situation is legally clarified. Otherwise, in the event the Player objects, the Organiser may only process the personal data to establish, assert or defend its own legal claims.
9.6. Revocation of consent
If the Organiser bases personal data processing on the Player’s consent, the Player may revoke such consent at any time and at no cost by contacting the Organiser’s Customer Service department.
The revocation of consent will not affect the lawfulness of the processing carried out up to that point in time.
9.7. Right of access
The right to request information from the Organiser as to whether we process data and to which data this refers.
9.8. Right to data portability
The right to receive certain personal data from us in a commonly used electronic format or to demand the transmission of the data to another controller.
10. COOKIE POLICY – ONLINE TRACKING AND ONLINE ADVERTISING METHODS BY THIRD-PARTY PROVIDERS
On our website, the gaming platform and the mycasino app, we use various technologies that enable us and third parties engaged by us to recognise you during your use of our services and to analyse your use of our offering. These include, in particular, cookies and similar technologies such as local storage, device identifiers, tracking pixels and digital fingerprints. In the mycasino app, additional app-specific technologies may be used, including local app storage, device identifiers, SDKs and analytics, security, fraud prevention, crash reporting and diagnostic technologies.
This Section 10 describes the cookies and third-party cookies used on the gaming platform and explains how the use of cookies and similar technologies on the gaming platform and in the mycasino app can be disabled or restricted. Additional information, in particular on cookie categories and technologies used in mobile applications, is provided in the mycasino Cookie Policy.
Cookies are small text files that are stored permanently or temporarily when a website is visited. The following types of cookies are used, two of which are third-party cookies:
Session cookies enable the Organiser to collect and store data during a Player’s visit to the gaming platform. Session cookies are not stored on the Player’s device for an extended period of time and are deleted when the web browser is closed. These cookies are often required for the website to work properly and are used to improve usability.
Persistent cookies enable the Organiser to save data (e.g. language selection) and to access this data the next time the Player visits the gaming platform.
Analysis cookies (third-party cookies) enable the Organiser to determine the number of visitors to the gaming platform. These cookies can be used to carry out statistical surveys on how the services are used. The aim is to improve the services offered. These cookies are also used to improve products, measure marketing activities and develop business.
Advertising cookies (third-party cookies) allow the Organiser to analyse player preferences and tailor marketing content to their interests. Thanks to these cookies, the Player can find out about current campaigns or offers through banner advertising on partner sites. These cookies are also used to specifically control and measure advertising on other websites.
10.1. Cookies
The website uses the following cookies:
__cf_bm:
The __cf_bm cookie is a cookie required to support Cloudflare Bot Management. As part of our bot management service, this cookie helps us to manage incoming data traffic that meets the criteria of bots.
__cfruid
This cookie is assigned to websites that use Cloudflare in order to identify trustworthy web data traffic.
AWSALB
AWS ELB Application Load Balancer
AWSALBCORS
This cookie is managed by AWS and is used to balance loads.
csrfToken
This cookie is associated with the Django web development platform for Python. It was developed to protect a website against a certain type of software attack via online forms.
Disabling cookies or similar technologies may affect the usability of the website, the gaming platform or the mycasino app. For example, certain functions and games on the gaming platform or in the mycasino app may not function properly or may only be available to a limited extent.
Cookies stored on the Player's device can be allowed, blocked or deleted at any time through the settings of the web browser. All web browsers provide information about cookies, enabling the Player to see which cookies are installed.
Changes to the browser settings relating to cookies may affect all websites visited, not only the gaming platform, unless individual cookies are disabled or removed separately.
Further information about cookie settings can be found under the "Help" section of the web browser's main menu. Non-essential analytics and marketing technologies used in the mycasino app can be restricted or disabled through the settings provided within the app, via the Player's account or, where supported by the mobile operating system, through the settings of the mobile operating system. Where it is not technically possible to provide such restriction or deactivation for non-essential analytics or marketing technologies, we will only use these technologies in the mycasino app where permitted under applicable law or where the Player has given prior consent.
Where cookies or similar technologies are necessary for the provision of our services, security, fraud prevention, error analysis or compliance with legal and regulatory obligations, they may be used without separate consent. Non-essential analytics and marketing technologies are used only where permitted under applicable law or where the Player has configured the relevant settings or has given the corresponding consent.
10.2. Use of third-party providers
We may also integrate additional third-party services, content, features or technologies into our website, the gaming platform and the mycasino app. Please note that if you click on a link to a third-party website (e.g. Google, social media platforms or other websites), you will be redirected to a website that is not under our control and to which this Privacy Policy no longer applies. Your use of and interaction with any such website are subject to the terms of use and the privacy policy and notices of that third-party website. We recommend that you carefully read the terms of use and the privacy policy and notices of any third-party website before submitting personal data through such website. We are not responsible or liable for the content or the processing of personal data by such third-party websites.
We currently use services from the following providers:
Adobe Typekit
We use Adobe Typekit from Adobe Inc., San Jose, California, USA to provide website fonts. To obtain these fonts, your browser connects to the servers of Adobe Inc., and your IP address is transmitted in the process.
We have no control over the retention period of the processed data, as this is determined by Adobe Inc. For more information, please refer to the privacy policy for Adobe Typekit at https://www.adobe.com/uk/privacy/policies/adobe-fonts.html.
Cloudflare Insights
We have incorporated Cloudflare Insights into our website. Cloudflare Insights is a service provided by Cloudflare, Inc., which develops cloud-based software that enables the operators of websites and applications to monitor the performance of their services. Cloudflare Insights makes it possible to generate statistical evaluations of the technical performance of our websites (such as the duration of a certain database enquiry, the stability and availability of our servers or the response times of our servers). For this purpose, application and browser data is collected and stored in the browser using cookies. In this case, the data is shared with Cloudflare, Inc. as the operator of Cloudflare Insights.
We have no control over the retention period of the processed data, as this is determined by Cloudflare, Inc. For more information, please refer to the privacy policy for Cloudflare Insights at https://www.cloudflare.com/privacypolicy/.
11. SOCIAL MEDIA PLUG-INS
Our website users the following social media plug-ins to improve our company’s visibility on those networks. You can identify each social media plug-in from the symbols on the website. We have configured these elements so that they are deactivated by default. If you utilise the services of these social networks independently of or in connection with our website or click on them to activate them, the social networks will evaluate how you use the plug-in. In this case, the plug-in will send information to the social networks. Your personal data will then be processed on the responsibility of that operator, in line with the operator’s privacy policy and with your consent. The operator does not share any information about you with us.
We currently use the following platforms; the identity and contact details of each platform operator can be found in their privacy policies:
Facebook
Privacy Policy: https://www.facebook.com/privacy/policy
Instagram
Instagram Threads
https://about.instagram.com/threads
Privacy Policy: https://privacycenter.instagram.com/policy
LinkedIn
Privacy Policy: https://de.linkedin.com/legal/privacy-policy
Snapchat
Privacy Policy: https://values.snap.com/privacy/privacy-policy
Telegram
Privacy Policy: https://telegram.org/privacy
TikTok
Privacy Policy: https://www.tiktok.com/legal/page/eea/privacy-policy/en
Twitter / X
Privacy Policy: https://twitter.com/privacy
WhatsApp
Privacy Policy: https://www.whatsapp.com/legal/privacy-policy-eea?lang=en
YouTube
Privacy Policy: https://policies.google.com/privacy?hl=de
The above list reflects the status at the time of publication of this Privacy Policy and will be updated whenever material changes are made.
12. DATA SECURITY
We have implemented appropriate security measures in order to safeguard the confidentiality, integrity and availability of your personal data, to protect it against unauthorised or unlawful processing and against the risk of loss, unintentional modification, unwanted disclosure or unauthorised access.
For example, the technical and organisational security measures may involve the encryption and pseudonymisation of data, logging, access restrictions, back-up copies, instructions for our employees, non-disclosure agreements and controls. We have appropriate encryption methods in place to protect data when it is being transmitted over our website. However, we are only able to secure areas that we control. We also oblige our data processors to implement appropriate security measures. However, security risks cannot be ruled out completely and elements of risk are unavoidable.
The Organiser takes adequate measures to protect personal data from unauthorised access and from unlawful or unauthorised processing, including theft, erasure, alteration, disclosure and transfer of such personal data. These measures include a) the greatest possible restriction of the group of persons authorised to access personal data, b) the restriction of the authorised persons’ ability to make changes, and c) technical obstacles to infringements, including encryption during transfer and storage, firewalls, strict password requirements and alert functions that report attempted infringements. The data will be pseudonymised if feasible to protect the Player’s privacy as much as possible.
13. MODIFICATIONS
The gaming platform, the range of games on offer and the associated services are constantly evolving and the applicable laws and regulations concerning data protection may change. The Organiser therefore reserves the right to modify the privacy policy at any time and without prior notice. The version published on the mycasino.ch website applies.