This notice details how GoldRun Casino processes personal data for players in France https://goldrun-fr.fr/legal-and-affiliates/. It covers the GoldRun Casino website, player accounts, payments, customer support, responsible gaming tools, and the affiliate programme. The notice follows the EU General Data Protection Regulation and the French Data Protection Act. GoldRun Casino is the data controller for all processing described here. Players should read this notice together with the general terms and conditions and any terms tied to specific promotions. The aim is to explain what data we collect, why we process it, how long we keep it, and what rights you have.
4. How GoldRun Casino Uses Player Data
GoldRun Casino uses personal data to offer its gaming services in a safe and lawful manner. The main purposes encompass registering accounts, processing payments, providing customer support, preventing fraud, meeting regulatory reporting duties, and sending information about promotions where permitted. The data also aids in analyse platform performance and optimize game selection. Each purpose is linked with a legal basis and associated defined retention periods. GoldRun Casino does not sell personal data to third parties. When data is provided to service providers, the sharing is limited to what is needed to perform a specific task under a written contract.
9. Player Rights Under the GDPR
Players located in France possess rights over their personal data under the GDPR and the French Data Protection Act. GoldRun Casino offers a privacy request process to assert these rights. The main rights are outlined below. Identity verification could be needed before a request is handled. GoldRun Casino responds to valid requests within one month, extendable by two further months when requests are complicated. If a request is refused, you will receive a clear explanation along with details on how to complain to the CNIL.
- Right to access: obtain confirmation as well as a copy of personal data processed.
- Right to correct: amend inaccurate or incomplete data.
- Right to deletion: request deletion where no legal basis requires retention.
- Right to restriction: curb processing in specific situations.
- Right to transfer data: receive certain data as a structured, machine-readable file.
- Objection right: object to processing based on legitimate interests.
- Right to withdraw consent: withdraw consent at any time for marketing or optional cookies.
8. Data Recipients and Transfers Abroad
GoldRun Casino discloses personal data to a limited set of recipients. These encompass payment service providers, identity verification providers, hosting and security vendors, customer support platforms, and regulatory authorities. Each processor is bound by a data processing agreement that controls use of the data to the contracted service. Regulators can request data for compliance audits or investigations. GoldRun Casino never disclose personal data to public authorities unless there is a lawful basis. Affiliates get only the restricted attribution data specified in Section 5. Some processors may operate outside the European Economic Area. When that occurs, GoldRun Casino uses adequacy decisions, standard contractual clauses, or binding corporate rules to ensure appropriate safeguards.
2) Osobní údaje, které shromažďujeme
GoldRun Casino shromažďuje řadu typů osobních údajů, aby mohlo provozovat své služby, splnilo zákonné povinnosti a zamezilo podvodům. Některé údaje nám dáváte přímo během registrace a ověřování. Jiné údaje jsou získávány automaticky, když používáte webové stránky nebo kontaktujete podporu. Přesné kategorie závisí na tom, zda brouzdáte stránky, otevřete účet, provedete platbu nebo se zapojíte do affiliate programu. GoldRun Casino omezuje sběr na údaje, které jsou potřebné pro konkrétní účel. Hlavní kategorie jsou uvedeny níže.
Oddíl 2.1
Identifikační údaje obsahují celé jméno, datum narození, státní příslušnost a údaje z identifikačního dokladu, pokud je vyžadováno ověření. Kontaktní údaje zahrnují e-mailovou adresu, poštovní adresu a telefonní číslo. Finanční údaje zahrnují podrobnosti o platební metodě, záznamy o vkladech a výběrech, identifikátory transakcí a v relevantních případech částečné informace o kartě. GoldRun Casino využívá tyto informace k zakládání a správě účtů, ověřování věku a polohy, vyřizování plateb a splnění požadavků na KYC. Pro hráče ve Francii mohou být adresa a identifikační údaje porovnávány proti schváleným databázím, aby se zajistilo, že hráč je starší 18 let a nenachází se v omezeném území. Toto zpracování podporuje hráčskou smlouvu a zákonné povinnosti podle francouzských hazardních předpisů.
2.2
Device data is generated when you use GoldRun Casino services. It includes IP address, browser type, device identifiers, operating system, screen resolution, language settings, and approximate location derived from the IP address. Usage data covers pages visited, games played, session duration, clicks, and interactions with promotions. GoldRun Casino uses this information to ensure service security, enhance website performance, and customize the player experience where consent has been given. Some technical data also helps uncover unauthorised access or account takeovers. The subcategory below breaks down data collected by automated means in more detail.
2.2.1 Device and Connection Data
Hardware and network information includes hardware model, browser version, operating system version, mobile network information, and unique identifiers such as advertising IDs or cookie values. GoldRun Casino handles this data to guarantee the platform functions properly across different devices and to diagnose technical problems. Connection data also helps security teams spot suspicious login patterns, like logins from new devices or unusual locations. When you approach support about a technical issue, device data may be used to simulate the problem and implement a fix. This processing supports GoldRun Casino’s legitimate interests in maintaining the service stable and avoiding fraud.
7. Retention and Security
GoldRun Casino stores personal data only as long as necessary to meet the purposes set out in this notice and to fulfill legal obligations. Account data is retained while the account is active and for a specified period after closure. Financial transaction records are kept under anti-money laundering and tax rules, which could require keeping records for five to ten years depending on the transaction type. Technical logs used for security are typically kept for a briefer period, unless an investigation necessitates longer preservation. After the retention period ends, data gets deleted or made anonymous. GoldRun Casino applies encryption, role-based access controls, multi-factor authentication, and regular security testing to safeguard personal data.
1. Data Controller and Scope
GoldRun Casino decides how and why player data is handled, making it the data controller for its platform and related services. In France, the supervisory authority is the Commission Nationale de l’Informatique et des Libertés (CNIL). This notice is relevant to registered players, website visitors, and anyone who participates in the affiliate programme. It does not extend to third-party websites you access through links, including payment providers or affiliate partner pages. Those third parties have their own privacy policies. The scope covers data collected online, by email, through customer support, and via mobile or desktop use of GoldRun Casino services.
6) Cookies and Tracking Technologies
GoldRun Casino utilizes cookies, pixels, and similar technologies to provide essential features, measure performance, and facilitate affiliate attribution. Some cookies are essential for the website to function, such as those that keep you logged in during a session or maintain security settings. Other cookies need consent under French law. The cookie consent tool provides detailed information about each category and enables you to adjust preferences at any time. Non-essential cookies are not deployed until consent is given, unless a limited exemption is applicable for certain analytics features.
3) 3. Legal Grounds for Handling
GoldRun Casino depends on particular justifications under the GDPR for each data handling task. The key justifications include performance of a contract, legal obligation, justified interests, and consent. Account creation and transaction handling rest on the need to perform the customer terms. Verifying identity and retention of financial records are grounded in regulatory duties as per French gambling and AML legislation. Fraud prevention and system protection rely on justified interests, weighed against player rights. Advertising materials and non-required cookies depend on consent. You can withdraw your approval at any time without changing the validity of previous data handling. The applicable basis for each task is described in this notice or obtainable upon inquiry.
- Contract performance: account setup, deposit transactions, withdrawal requests, and gameplay.
- Regulatory requirement: identity verification, responsible gaming records, and tax reporting.
- Lawful interests: fraud prevention, cybersecurity, and service improvement.
- Permission: marketing messages and non-mandatory analytics or monitoring.
Fifth Affiliate Programme and Data Sharing
GoldRun Casino manages an affiliate programme through which third-party websites market the casino in return for commission. When you arrive through an affiliate link, certain data is employed to credit the visit and any later registration or deposit to the correct affiliate. The affiliate programme is governed by separate terms, but this privacy notice describes the personal data implications for players in France. Affiliate tracking utilizes cookies, click identifiers, and transaction data. GoldRun Casino transmits only limited attribution data with affiliate partners and does not supply affiliates with full payment details or identity documents.
Section 5.1 Affiliate Tracking and Attribution
Affiliate tracking starts when you tap a link on an affiliate website. A click identifier or affiliate cookie can be placed on your device. If you later register and make a qualifying deposit, GoldRun Casino utilizes the identifier to reward the referring affiliate. The tracked data includes the affiliate ID, campaign ID, click time, device category, and conversion status. This processing is required for the performance of the affiliate agreement and for accurate commission calculation. You can control affiliate cookies through the cookie consent tool or browser settings. Clearing cookies might prevent an affiliate from receiving credit for a later visit.
10. Modifications to This Policy and Contact Information
GoldRun Casino can modify this privacy notice as its services, legal obligations, or data practices change. Material updates will be notified through the website or by email when necessary. Players are encouraged to review the notice periodically, especially before performing significant account changes or sending new personal data. Continued use of the platform after a notice update does not diminish the legal rights available under the GDPR. If a modification demands new permission, GoldRun Casino will request that consent independently. You can reach the data protection team through the support centre or the legal section of the website. You also have the entitlement to submit a grievance with the CNIL.