The security of personal data represents a central part of all services delivered by Pinco Casino. Users located in Poland use a platform that completely aligns its data retention methods with the General Data Protection Regulation and the Polish Act on the Protection of Personal Data. This policy defines how long different categories of information are stored, the legal bases that validate each retention period, and the rights individuals possess over their data. The approach is built on the principle of storage limitation, indicating no record is kept longer than necessary for its original business or legal purpose. Regulatory obligations related to anti-money laundering, responsible gambling, and tax reporting directly shape retention schedules. The same detailed care applies to the data generated through the Pinco Casino affiliate programme, securing partners profit from the same transparent and lawful handling. A dedicated team regularly reviews these practices so that every user, be it a player or an affiliate, can interact with clear expectations about how their information is processed.
Individual Rights Under GDPR and National Legislation
Entitlement to Access and Amendment
Each user in Poland is entitled to obtain confirmation whether Pinco Casino processes their personal data and to receive a copy of that data in a structured and widely used format. Addressing such access requests is a priority, and the dedicated data protection team aims to deliver the information within the legal one-month deadline. Where requests are complex, this period may extend by two additional months with clear communication to the individual. Alongside access, the right to rectification permits individuals to correct inaccurate or incomplete data without excessive delay. This is especially relevant when identity documents are expired or when a player requires updating a registered payment option. The platform has integrated a self-service interface that allows immediate correction of contact details, while more critical changes related to financial identity initiates a verification step to deter fraudulent modification efforts.
Right to Erasure and Limitation
The right to erasure, frequently called the right to be forgotten, is honoured by Pinco Casino once the grounds specified in Article 17 of the GDPR are fulfilled. If the data is no longer required for the original purpose, consent is withdrawn, or the processing was illegitimate, deletion requests are performed with urgency. However, this right is not absolute. Where legal obligations such as anti-money laundering statutes require continued storage, the erasure request culminates in restriction of processing rather than full deletion. During a restriction period, data stays stored in a secure and access-restricted archive but is not utilized for any other purpose. Users are informed of the particular legal provision overriding their request, along with the projected date when erasure will become achievable. This clear balancing of rights and duties reassures individuals that lawful regulatory requirements do not become an excuse for endless data accumulation.
Storage Durations for Different Data Types
Active Account Data
While a gambler account remains active, all profile information, gaming history, promotional interaction records, and responsible gambling limits are retained in instant-access storage. This continuous availability permits the platform to deliver customized experiences, apply deposit limits, and display correct account figures. The time an account goes idle or a user requests closure, the status of the data shifts into a controlled status. Nevertheless, the storage timeline does not begin right away removing everything. Pinco Casino applies a structured cooling-off period before permanent removal begins, chiefly to prevent fraudulent re-registrations and chargeback claims. Throughout this waiting period, promotional messages cease right away if approval is revoked. The relationship between active and closed states of data demonstrates how data timelines are not uniform but vary according to the evolving purpose and statutory obligation tied to each data type.
Correspondence and Assistance Data
Logs from live chat sessions, correspondence, and recorded telephone conversations with customer service staff are kept for a lesser time relative to transaction logs. These logs are utilized to address complaints, improve service quality, and show adherence with safe gaming practices. The typical duration for assistance records is 18 months from the day of the most recent exchange except if a particular instance is identified for a extended period due to an ongoing complaint or regulatory inquiry. After this period, the material is deleted through scheduled deletion processes that eliminate attachments, text bodies, and metadata from the customer relationship management system. Voice recordings are handled with the identical schedule, and players are advised about the call logging at the beginning of each call. By retaining confidential dialogue records only as much as it fulfills a definite service improvement or legal defence purpose, Pinco Casino reduces unnecessary exposure.
Partner Program Data Retention and Conditions
Pinco Casino considers affiliates as business partners whose data handling demands merge contractual performance with privacy obligations. Upon entering the program, an affiliate authorizes to the gathering of business contact details, tax numbers, and billing data. The terms of the affiliate agreement specify the retention schedule: all private data associated with the relationship is kept for the term of the agreement, and for 5 years after its end to fulfill tax review timelines. During this data-keeping phase, affiliates can demand an extraction of their earnings history and performance data. The system also processes combined referral information that connects an affiliate to player activity, but never exposes personal player information to the affiliate. Tracking cookie data used to assign sign-ups adheres to a far briefer storage period, typically ending a month after the most recent click, ensuring that privacy-focused approaches are embedded into the tracking systems that affiliates rely upon.
Protective Protocols Protecting Retained Data
Technological Protections
All retained data, whether concerning Polish players or international partners, is secured by a defense-in-depth structure. Encryption at rest using AES-256 standard protects databases and backup storage, while all data during transfer is secured through TLS protocols. The network perimeter is monitored by intrusion detection systems that detect abnormal access patterns, and vulnerability scans are carried out on a recurring schedule. Pseudonymization methods are applied to data sets used in testing environments, guaranteeing that development and quality assurance processes never expose live personal information. Access to archived records is strictly role-based, with multi-factor authentication required for any data retrieval by staff. Logs of every administrative data access event are likewise kept and audited to detect potential misuse. These technical controls are constantly reviewed against evolving threats, with regular penetration testing performed by independent security firms to validate the resilience of the storage infrastructure.
Organisational and Staff Measures
Systems alone cannot guarantee data safety; therefore Pinco Casino establishes comprehensive organisational measures. All employees participate in mandatory data protection training during onboarding and undergo annual refresher sessions that include retention schedules, breach reporting procedures, and the specific requirements of handling Polish user data. Internal policies implement the principle of least privilege, granting data access only to roles whose functions strictly require it. A designated Data Protection Officer oversees compliance, performs periodic retention audits, and serves as the point of contact for supervisory authorities. Any detected data breach is quickly reviewed, documented, and notified to the relevant regulator and affected individuals within the legally mandated 72-hour window where a risk exists. Vendor agreements with cloud storage and backup providers include strict data processing addenda that limit retention to instructed periods, making certain that third parties do not hold copies of personal data beyond the necessary term.
Policy Updates and Procedures for Notification
The context in which Pinco Casino operates evolves through new regulatory guidance, technological changes, and shifts in business conduct. Consequently, the policy on data retention undergoes routine review at least once per calendar year, with temporary changes triggered by major legal changes or service changes. When an revised version is implemented, all Polish users with an active account receive immediate notice via the e-mail address stored in their user profile at least two weeks before the modifications take effect. For closed accounts that still have retained data, a notice is displayed on the main website and sent through any remaining communication channel where allowed by law. The revision history is thoroughly documented, and previous iterations of the document remain reachable upon demand. Customers bound by substantially different retention terms are offered the opportunity to exercise their legal rights before the revised policy becomes effective, guaranteeing that no person is unexpectedly affected by an longer storage duration they did not expect.
Groups of Individual Data Stored
Player ID and Verification Data
To satisfy mandatory know-your-customer requirements, Pinco Casino stores copies of government-issued identification files, proof of address, and payment method verification items. This class covers full name, date of birth, nationality, and the visual material of uploaded files. The retention of such sensitive data adheres to the legal obligation basis under anti-money laundering laws. Even after account termination, identity documentation typically is archived for a period of five years, mirroring the standard mandated by financial regulatory authorities. During this time, access is strictly limited to compliance and fraud prevention teams. After the retention window concludes, digital records and associated metadata are permanently deleted from live systems and backups in a fashion that prevents reconstruction. The platform never utilizes this verification data for marketing goals, keeping a strict separation between regulatory files and commercial records.
Financial and Transaction Records
Any deposit, withdrawal, bonus adjustment, and wagering activity produces a financial record that constitutes part of the permanent audit trail. Such data contains transaction identifiers, amounts, currency, payment method details, and timestamps. Polish tax law, combined with EU anti-money laundering directives, compels the operator to preserve these records for a minimum retention period that lasts beyond the closure of a player account. Typically, the retention term is at five years from the date of the last financial movement, though records implicated in a dispute or legal claim are held until resolution plus an additional safeguarding period. This extended storage ensures that Pinco Casino can respond to requests from tax authorities, law enforcement agencies, and financial intelligence units without delay. No transaction data is marketed or repurposed for secondary profiling, and automatic anonymisation processes commence immediately once the statutory retention obligation expires.
Affiliate Programme Data
The associate scheme creates a separate data set that includes the partner’s business name, tax identification number, payment instructions, performance metrics, and records of referred players in hashed form. Contracts with affiliates are treated as business documents, implying their retention is controlled by both commercial law and tax reporting requirements. Pinco Casino keeps full partnership records for the duration of the active agreement plus five years after termination. During this period, the affiliate holds the right to access historical commission reports and payment ledgers. Usage data tied to affiliate tracking links remains stored for a shorter interval consistent with cookie consent durations, after which it is combined and stripped of identifiers. This balanced approach safeguards the legitimate interest of the affiliate in verifying past earnings while respecting the privacy of referred players whose individual activity becomes unidentifiable after the cookie window ends.
Frequently Asked Questions
On what legal basis is my personal data retained?
Pinco Casino depends on a mix of justifications like contractual necessity for providing gaming services, legal obligations under anti-money laundering and tax laws, and legitimate interests for fraud prevention. Consent is employed for marketing communications and certain cookies, and it may be revoked at any time without influencing the legality of processing based on other grounds already in progress.
Can I request immediate deletion of my entire player record?
You may send a deletion request at any time, and Pinco Casino will evaluate it promptly. However, if certain data are governed by a legal retention requirement, they cannot be deleted immediately. In such cases, the processing of those records is limited so they are held securely but not employed for other purposes until the obligation expires.
How long does Pinco Casino keep identity documents after account closure?
Government-issued identity documents and proof of address are usually kept for five years following account closure to comply with anti-money laundering regulations. After this period, digital copies are irreversibly deleted from active systems and backups. Only compliance personnel with a strict need-to-know have access to these files during the holding timeframe.
Is data from the affiliate program included in this policy?
Yes, the data retention policy completely covers affiliate partners. Personal and payment information linked to an affiliate account is kept for the duration of the partnership and five years after termination to meet tax and commercial record-keeping requirements. Aggregated referral statistics without personal identifiers may be retained longer for business analysis.
How is my data handled after extended inactivity?
After a predefined dormancy period defined in the terms, your account may be marked as inactive https://pinco.net.pl/legal-and-affiliates/. Data remains stored but is moved to a restricted-access environment. Marketing communications cease, and the clock for final deletion begins once any overriding legal obligations expire. You can reactivate your account within that window by completing a verification process.
Do I receive a warning before data deletion?
Not in every scenario. If deletion occurs because the retention period has naturally expired, automated processes remove data without prior individual notification. However, if Pinco Casino decides to delete data earlier for policy reasons, or when responding to a justified erasure request, a confirmation of deletion is sent to the registered email address once the operation completes.
What happens to backup copies following data deletion?
When a deletion request is fulfilled or a data retention term concludes, data is removed from production databases immediately. Backup tapes and cloud snapshots are renewed in a cyclical manner, and personal data within those backups is made unavailable once the main deletion is executed. Backup media are fully refreshed according to a documented schedule to prevent residual data persistence.
Licensing System and Licensing
Pinco Casino operates under a gaming licence issued by the regulatory authority of Curaçao, a jurisdiction that applies strict data protection obligations on its licensees. For users entering the platform from Poland, the licence conditions are enhanced by mandatory compliance with the European Union’s data protection regime. The GDPR serves as the primary legal foundation, while specific Polish data protection legislation provides further refinements regarding the retention of personal information. Under this dual framework, all personal data processing must fulfill at least one lawful basis, such as contractual necessity, legal obligation, legitimate interest, or explicit consent. Retention periods are directly tied to those bases. For example, data processed to perform the player contract is kept for the duration of the relationship plus applicable limitation periods for potential claims. In contrast, records tied to anti-money laundering directives are held for a minimum of five years after the last transaction, following statutory mandates that supersede shorter user preferences. This layered legal structure guarantees that data is neither disposed of prematurely, risking non-compliance, nor held indefinitely without justification.
Extent of the Data Storage Policy
The policy covers all personal data obtained from two distinct groups: registered players holding active or closed accounts within the Pinco Casino environment, and individuals taking part in the Pinco Casino affiliate programme. It encompasses information submitted during registration, documents furnished for identity verification, transaction logs, communications with customer support, and technical data generated by browsing activity. For affiliates, the policy regulates contact details, payment information, traffic statistics, and any contractual correspondence that emerges during the partnership. Data collected through cookies and similar tracking technologies is also included, with retention matched to the specific purposes of analytics and marketing consent. Importantly, the policy does not cover anonymised or aggregated data from which individuals can no longer be identified. Such statistical material may be retained indefinitely because it falls outside the definition of personal data under GDPR. By delineating this scope with precision, Pinco Casino guarantees that all parties know exactly which categories of information are subject to documented retention rules and which fall outside regulated processing.
