This notice sets out how GoldRun Casino manages personal data for players in France. It includes the GoldRun Casino website, player accounts, payments, customer support, responsible gaming tools, and the affiliate programme. The notice adheres to the EU General Data Protection Regulation and the French Data Protection Act. GoldRun Casino is the data controller for all processing described here. Players should read this notice in conjunction with the general terms and conditions and any terms tied to specific promotions. The goal is to explain what data we collect, why we process it, how long we keep it, and what rights you have.
6) Cookies and Tracking Technologies
GoldRun Casino uses cookies, pixels, and similar technologies to provide essential features, measure performance, and aid affiliate attribution. Some cookies are required for the website to work, such as those that preserve your session during a session or maintain security settings. Other cookies require consent under French law. The cookie consent tool provides detailed information about each category and allows you to modify preferences at any time. Non-essential cookies are not set until consent is given, unless a limited exemption is applicable for certain analytics features.
3) 3. Legal Grounds for Processing
GoldRun Casino bases its operations on particular legal bases as per the GDPR for every processing operation. The primary grounds are contract performance, statutory duty, legitimate interests, and approval. Opening an account and payment processing rest on the necessity of fulfilling the player agreement. ID checks and keeping financial records are grounded in legal obligations pursuant to French gambling and anti-money laundering law. Preventing fraud and system protection are based on lawful interests, weighed against customer rights. Marketing communications and non-essential cookies rest on approval. You are able to withdraw your permission whenever you wish without affecting the validity of prior processing. The applicable basis for each task is described in this notice or available on request.
- Contract performance: account registration, deposit transactions, withdrawals, and gameplay.
- Regulatory requirement: verifying identity, records of responsible gaming, and tax reporting.
- Lawful interests: fraud prevention, cybersecurity, and service improvement.
- Permission: promotional communications and voluntary analytics or data tracking.
2) Osobní údaje, které shromažďujeme
GoldRun Casino shromažďuje řadu druhů osobních údajů, aby poskytovalo své služby, dodržovalo zákonné povinnosti a zamezilo podvodům. Některé údaje nám poskytujete přímo během registrace a ověřování. Další údaje jsou vytvářeny automaticky, když používáte webové stránky nebo napíšete podporu. Přesné kategorie se odvíjejí na tom, zda jen procházíte stránky, založíte účet, zašlete platbu nebo se zaregistrujete do affiliate programu. GoldRun Casino redukuje sběr na údaje, které jsou nezbytné pro konkrétní účel. Hlavní kategorie jsou popsány níže.
2.1 Identifikační, kontaktní a finanční údaje
Identitní údaje pokrývají celé jméno, datum narození, státní příslušnost a údaje z identifikačního dokladu, pokud je vyžadováno ověření. Kontaktní údaje obsahují e-mailovou adresu, poštovní adresu a telefonní číslo. Finanční údaje zahrnují podrobnosti o platební metodě, záznamy o vkladech a výběrech, identifikátory transakcí a v relevantních případech částečné informace o kartě. GoldRun Casino používá tyto informace k zakládání a správě účtů, ověřování věku a polohy, zpracování plateb a plnění požadavků na KYC. Pro hráče ve Francii mohou být adresa a identifikační údaje porovnávány proti schváleným databázím, aby se potvrdilo, že hráč je starší 18 let a nenachází se v omezeném území. Toto zpracování podporuje hráčskou smlouvu a zákonné povinnosti podle francouzských hazardních předpisů.
2.2 Technické a provozní údaje
Device data is generated when you access GoldRun Casino services. It contains IP address, browser type, device identifiers, operating system, screen resolution, language settings, and approximate location based on the IP address. Usage data includes pages visited, games played, session duration, clicks, and interactions with promotions. GoldRun Casino uses this information to maintain service security, optimize website performance, and customize the player experience where consent has been given. Some technical data also aids detect unauthorised access or account takeovers. The subcategory below breaks down data collected by automated means in more detail.
Hardware and Network Data
System and link details includes hardware model, browser version, operating system version, mobile network information, and unique identifiers such as advertising IDs or cookie values. GoldRun Casino processes this data to make sure the platform works correctly across different devices and to resolve technical problems. Connection data also enables security teams spot suspicious login patterns, like logins from new devices or unusual locations. When you approach support about a technical issue, device data may be used to reproduce the problem and find a fix. This processing aligns with GoldRun Casino’s legitimate interests in ensuring the service stable and preventing fraud.
Section 8. Data Receivers and Transfers Abroad
GoldRun Casino discloses personal data to a restricted set of parties. These encompass payment service providers, identity verification providers, hosting and security vendors, customer support platforms, and regulatory authorities. Each processor is bound by a data processing agreement that limits use of the data to the contracted service. Regulators may request data for compliance audits or investigations. GoldRun Casino never disclose personal data to public authorities unless there is a lawful basis. Affiliates receive only the restricted attribution data specified in Section 5. Some processors could operate outside the European Economic Area. When that occurs, GoldRun Casino employs adequacy decisions, standard contractual clauses, or binding corporate rules to ensure appropriate safeguards.
4. How GoldRun Casino Uses Player Data
GoldRun Casino employs personal data to deliver its gaming services in a secure and compliant way https://goldrun-fr.fr/legal-and-affiliates/. The main purposes cover registering accounts, processing payments, providing customer support, preventing fraud, meeting regulatory reporting duties, and sending information about promotions where permitted. The data also aids in evaluating platform performance and enhance game selection. Each purpose is linked with a legal basis and with defined retention periods. GoldRun Casino does not sell personal data to third parties. When data is disclosed to service providers, the sharing is limited to what is required to perform a specific task under a written contract.
9. Rights of Players Under the GDPR
Players in France possess rights regarding their personal data pursuant to the GDPR and the French Data Protection Act. GoldRun Casino makes available a privacy request process to exercise these rights. The main rights are outlined below. Identity verification may be required before a request is fulfilled. GoldRun Casino addresses valid requests within one month, extendable by two further months for complex requests. If a request is refused, you will receive a clear explanation and information about how to complain to the CNIL.
- Right to access: receive confirmation as well as a copy of personal data processed.
- Right to correct: amend inaccurate or incomplete data.
- Right to deletion: ask for deletion when no legal basis mandates retention.
- Right to restriction: limit processing under certain conditions.
- Right to data portability: obtain certain data as a structured, machine-readable file.
- Objection right: object to processing grounded in legitimate interests.
- Right to withdraw consent: revoke consent at any moment for marketing or optional cookies.
Fifth Affiliate Programme and Data Sharing
GoldRun Casino manages an affiliate programme by which third-party websites market the casino in exchange for commission. When you come through an affiliate link, certain data is used to attribute the visit and any later registration or deposit to the correct affiliate. The affiliate programme is governed by separate terms, but this privacy notice outlines the personal data implications for players in France. Affiliate tracking uses cookies, click identifiers, and transaction data. GoldRun Casino provides only limited attribution data with affiliate partners and does not supply affiliates with full payment details or identity documents.
5.1 Affiliate Tracking and Attribution
Affiliate tracking starts when you click a link on an affiliate website. A click identifier or affiliate cookie may be placed on your device. If you later enroll and make a qualifying deposit, GoldRun Casino uses the identifier to reward the referring affiliate. The tracked data includes the affiliate ID, campaign ID, click time, device category, and conversion status. This processing is required for the performance of the affiliate agreement and for accurate commission calculation. You can manage affiliate cookies through the cookie consent tool or browser settings. Clearing cookies could prevent an affiliate from receiving credit for a later visit.
1. Controller of Data and Scope
GoldRun Casino chooses how and why player data is managed, making it the data controller for its platform and related services. In France, the supervisory authority is the Commission Nationale de l’Informatique et des Libertés (CNIL). This notice pertains to registered players, website visitors, and anyone who participates in the affiliate programme. It does not apply to third-party websites you visit through links, including payment providers or affiliate partner pages. Those third parties keep their own privacy policies. The scope encompasses data collected online, by email, through customer support, and via mobile or desktop use of GoldRun Casino services.
7. Storage and Safeguarding
GoldRun Casino retains personal data only for as long as needed to fulfil the purposes set out in this notice and to fulfill legal obligations. Account data is kept while the account remains active and for a certain period after closure. Financial transaction records are retained under anti-money laundering and tax rules, which might necessitate keeping records for five to ten years depending on the transaction type. Technical logs used for security are normally stored for a briefer period, unless an investigation requires longer preservation. After the retention period expires, data is deleted or anonymised. GoldRun Casino applies encryption, role-based access controls, multi-factor authentication, and regular security testing to secure personal data.
10. Changes to This Privacy Notice and Contact
GoldRun Casino can modify this privacy notice when its services, legal requirements, or data handling change. Material changes will be notified through the site or by email as needed. Users are encouraged to review the notice from time to time, in particular before making significant account updates or submitting new personal data. Continued use of the service after a notice update does not diminish the legal rights provided under the GDPR. If a modification demands new consent, GoldRun Casino will request that consent separately. You can contact the data protection department through the support center or the legal part of the site. You also have the option to file a complaint with the CNIL.