The security of personal data represents a central part of every service offered by Pinco Casino. Users located in Poland engage with a platform that fully aligns its data retention practices with the General Data Protection Regulation and the Polish Act on the Protection of Personal Data. This policy specifies how long different categories of information are stored, the legal bases that support each retention period, and the rights individuals hold over their data. The approach is built on the principle of storage limitation, meaning no record is kept for more than necessary for its primary business or legal purpose. Regulatory obligations pertaining to anti-money laundering, responsible gambling, and tax reporting directly determine retention schedules. The same thorough care covers the data generated through the Pinco Casino affiliate programme, securing partners profit from the same clear and lawful handling. A dedicated team continuously reviews these practices so that every user, whether a player or an affiliate, can participate with clear expectations about how their information is managed.

Common Questions

What legal grounds justify keeping my personal information?

Pinco Casino relies on a mix of justifications such as contractual requirements for delivering gaming services, regulatory requirements under anti-money laundering and tax laws, and lawful interests for fraud prevention. Permission is employed for marketing communications and certain cookies, and it can be withdrawn at any time without influencing the lawfulness of processing based on other grounds already in progress.

Can I request immediate deletion of my entire player record?

You may send a deletion request at any time, and Pinco Casino will review it promptly. However, if specific records are governed by a legal retention requirement, they may not be removed immediately. In such cases, the processing of those records is restricted so they are stored securely but not utilized for other purposes until the obligation expires.

What is the retention period for ID documents after closing an account?

Government-issued identity documents and proof of address are typically retained for five years following account closure to meet anti-money laundering regulations. After this period, digital copies are permanently destroyed from active systems and backups. Only compliance personnel with a strict need-to-know have access to these files during the retention window.

Is data from the affiliate program included in this policy?

Certainly, the data retention policy completely covers affiliate partners. Personal and payment information linked to an affiliate account is kept for the duration of the partnership and five years after termination to meet tax and commercial record-keeping requirements. Aggregated referral statistics without personal identifiers may be retained longer for business analysis.

How is my data handled after extended inactivity?

After a set dormancy period defined in the terms, your account may be marked as inactive. Data remains stored but is moved to a restricted-access environment. Marketing communications cease, and the clock for final deletion begins once any overriding legal obligations expire. You can reactivate your account within that window by completing a verification process.

Is notification provided prior to data removal?

Not in every scenario. If deletion occurs because the retention period has naturally expired, automated processes remove data without prior individual notification. However, if Pinco Casino decides to delete data earlier for policy reasons, or when responding to a justified erasure request, a confirmation of deletion is sent to the registered email address once the operation completes.

What happens to backup copies following data deletion?

When a deletion request is fulfilled or a storage period expires, data is deleted from production databases immediately. Backup tapes and cloud snapshots are renewed in a cyclical manner, and personal data within those backups is rendered inaccessible once the main deletion is executed. Backup media are completely renewed according to a documented schedule to prevent residual data persistence.

Categories of Private Data Retained

Member Identity and Authentication Data

To satisfy mandatory know-your-customer requirements, Pinco Casino stores duplicates of government-issued identification papers, proof of address, and payment method verification records. This class covers full name, date of birth, nationality, and the visual content of uploaded files. The retention of such sensitive data adheres to the legal obligation basis under anti-money laundering legislation. Even after account termination, identity documentation commonly stays archived for a period of five years, matching the standard required by financial regulatory bodies. During this term, access is strictly limited to compliance and fraud prevention departments. After the retention window concludes, digital documents and associated metadata are permanently deleted from live systems and backups in a way that prevents reconstruction. The platform never utilizes this verification data for marketing goals, maintaining a strict distinction between regulatory files and commercial profiles.

Monetary and Transaction Records

Each deposit, withdrawal, bonus adjustment, and wagering activity creates a financial record that forms part of the permanent audit trail. Such data contains transaction identifiers, amounts, currency, payment method details, and timestamps. Polish tax law, combined with EU anti-money laundering directives, compels the operator to keep these records for a minimum retention period that extends beyond the closure of a player account. Typically, the retention term is at five years from the date of the last financial movement, though records caught in a dispute or legal claim are held until resolution plus an additional safeguarding period. This extended storage assures that Pinco Casino can respond to requests from tax authorities, law enforcement agencies, and financial intelligence units without delay. No transaction data is marketed or repurposed for secondary profiling, and automatic anonymisation processes commence immediately once the statutory retention obligation ends.

Referral Programme Data

The partner program creates a unique data set that includes the partner’s business name, tax identification number, payment instructions, performance metrics, and records of referred players in hashed form. Partner contracts are handled as business documents, implying their retention is regulated by both commercial law and tax reporting requirements. Pinco Casino retains full partnership records for the duration of the active agreement plus five years after termination. During this period, the affiliate holds the right to access historical commission reports and payment ledgers. Usage data tied to affiliate tracking links stays stored for a shorter interval consistent with cookie consent durations, after which it is compiled and stripped of identifiers. This balanced approach preserves the legitimate interest of the affiliate in verifying past earnings while respecting the privacy of referred players whose individual activity becomes unidentifiable after the cookie window ends.

Policy Updates and Notification Procedures

The context in which Pinco Casino works develops through new regulatory requirements, technological changes, and changes in business practice. Consequently, the data retention policy undergoes regular review at least once per calendar year, with interim revisions triggered by important legal updates or changes in service. When an new version is introduced, all Polish users with an active profile receive direct notice via the electronic mail address stored in their account at least 14 days before the changes take effect. For closed accounts that still have stored data, a notification is displayed on the company website and delivered through any available communication channel where permitted by law. The history of versions is thoroughly documented, and past versions of the document remain accessible upon inquiry. Individuals affected by materially different retention periods are provided with the possibility to enforce their entitlements before the updated policy becomes effective, making sure that no person is taken by surprise by an extended storage term they did not foresee.

Data Subject Rights Under GDPR and Local Law

Right of Access and Amendment

Every user in Poland is entitled to get confirmation whether Pinco Casino processes their personal data and to get a copy of that data in a structured and widely used format. Handling such access requests remains a priority, and the specialized data protection team strives to provide the information within the regulatory one-month period. In cases of complex requests, this period may extend by two further months with explicit notification to the individual. Besides access, the right to rectification permits individuals to rectify inaccurate or incomplete data without excessive delay. This is specifically pertinent when identity documents are expired or when a player requires updating a registered payment method. The platform has incorporated a self-service interface that enables immediate rectification of contact details, while more delicate changes related to financial identity triggers a verification step to prevent fraudulent alteration attempts.

Right to Erasure and Constraint

The right to erasure, commonly referred to as the right to be forgotten, is respected by Pinco Casino once the grounds specified in Article 17 of the GDPR are met. If the data ceases to be necessary for the original purpose, consent is withdrawn, or the processing was illegitimate, deletion requests are executed with urgency. However, this right is not unconditional. Where legal obligations such as anti-money laundering laws require continued storage, the erasure request results in restriction of processing rather than full deletion. During a restriction period, data is kept stored in a secure, access-limited archive but is not used for any other purpose. Users are notified of the specific legal provision overriding their request, along with the anticipated date when erasure will become feasible. This clear balancing of rights and duties comforts individuals that legitimate regulatory requirements do not become an excuse for endless data accumulation.

Licensing System and Permits

Pinco Casino functions under a gaming licence granted by the regulatory authority of Curaçao, a jurisdiction that imposes strict data protection obligations on its licensees. For users entering the platform from Poland, the licence conditions are complemented by mandatory compliance with the European Union’s data protection regime. The GDPR functions as the primary legal foundation, while specific Polish data protection legislation adds further refinements regarding the retention of personal information. Under this dual framework, all personal data processing must meet at least one lawful basis, such as contractual necessity, legal obligation, legitimate interest, or explicit consent. Retention periods are directly connected to those bases. For example, data processed to perform the player contract is stored for the duration of the relationship plus applicable limitation periods for potential claims. In contrast, records tied to anti-money laundering directives are kept for a minimum of five years after the last transaction, following statutory mandates that outweigh shorter user preferences. This layered legal structure assures that data is neither disposed of prematurely, risking non-compliance, nor held indefinitely without justification.

Range of the Data Retention Policy

The policy governs all personal data collected from two distinct groups: registered players holding active or closed accounts within the Pinco Casino environment, and individuals participating in the Pinco Casino affiliate programme. It covers information submitted during registration, documents submitted for identity verification, transaction logs, communications with customer support, and technical data generated by browsing activity. For affiliates, the policy addresses contact details, payment information, traffic statistics, and any contractual correspondence that occurs during the partnership. Data gathered through cookies and similar tracking technologies is also incorporated, with retention aligned to the specific purposes of analytics and marketing consent. Importantly, the policy does not apply to anonymised or aggregated data from which individuals can no longer be distinguished. Such statistical material may be kept indefinitely because it falls outside the definition of personal data under GDPR. By defining this scope with precision, Pinco Casino ensures that all parties know exactly which categories of information are subject to documented retention rules and which fall outside regulated processing.

Partner Program Record Keeping and Terms

Pinco Casino treats affiliates as business partners whose information management demands blend contractual performance with data protection duties. Upon joining the programme, an affiliate agrees to the gathering of business contact details, tax IDs, and billing data. The provisions of the affiliate agreement clearly state the storage timeline: all personal information associated with the relationship is stored for the duration of the agreement, and for 5 years after its termination to satisfy tax audit periods. During this storage period, affiliates can request an download of their earnings history and performance data. The platform also handles combined referral information that associates an affiliate to player activity, but never discloses specific user details to the affiliate. Cookie information used to credit registrations adheres to a significantly shorter storage period, typically ending 30 days after the most recent click, making sure that privacy-focused approaches are integrated into the performance measurement tools that affiliates depend on.

Protective Protocols Safeguarding Retained Data

Technical Safeguards

All retained data, whether concerning Polish players or international partners, is protected by a multi-tiered security framework. Encryption at rest using AES-256 standard protects databases and backup storage, while all transmitted data is secured through TLS protocols. The network perimeter is overseen by intrusion detection systems that detect abnormal access patterns, and vulnerability scans are carried out on a recurring schedule. Pseudonymisation techniques are applied to data sets used in testing environments, guaranteeing that development and quality assurance processes never expose live personal information. Access to archived records is strictly role-based, with multi-factor authentication required for any retrieval attempt by staff. Logs of every administrative data access event are likewise kept and audited to detect potential misuse. These technical controls are constantly reviewed against evolving threats, with regular penetration testing performed by independent security firms to validate the resilience of the storage infrastructure.

Administrative and Employee Protocols

Technology alone cannot guarantee data safety; hence Pinco Casino establishes comprehensive organisational measures. All employees participate in mandatory data protection training during onboarding and participate in annual refresher sessions that cover retention schedules, breach reporting procedures, and the specific requirements of handling Polish user data. Internal policies enforce the principle of least privilege, granting data access only to roles whose functions strictly require it. A designated Data Protection Officer oversees compliance, performs periodic retention audits, and functions as the point of contact for supervisory authorities. Any detected data breach is immediately evaluated, documented, and notified to the relevant regulator and affected individuals within the legally mandated 72-hour window where a risk exists. Vendor agreements with cloud storage and backup providers include strict data processing addenda that restrict retention to instructed periods, making certain that third parties do not hold copies of personal data beyond the necessary term.

Storage Durations for Multiple Data Types

Live Account Information

While a player account is operational, all personal details, play records, bonus usage information, and safe play boundaries are retained in real-time databases. This continuous availability allows the platform to provide tailored features, enforce deposit limits, and display correct account figures. The time an account goes idle or a user requests closure, the state of the data moves into a limited state. However, the deletion countdown does not immediately start erasing everything. Pinco Casino applies a formal waiting phase before permanent removal begins, chiefly to prevent fraudulent re-registrations and payment disputes. Even during this waiting period, promotional messages stop right away if approval is canceled. The relationship between active and closed states of data illustrates how retention periods are not fixed but shift according to the developing reason and statutory obligation tied to each information class.

Chat and Help Records

Records from live chat sessions, email exchanges, and recorded telephone conversations with customer service staff are retained for a lesser time relative to transaction logs https://pinco.net.pl/legal-and-affiliates/. These files are used to resolve disputes, improve service quality, and demonstrate compliance with ethical play engagements. The standard retention term for assistance records is a year and a half from the date of the most recent exchange unless a certain situation is flagged for a longer hold due to an current grievance or legal probe. Upon this duration, the information is removed through automated lifecycle workflows that remove files, written parts, and information tags from the client management software. Audio files are managed with the matching timeframe, and customers are informed about the call logging at the beginning of each conversation. By storing sensitive conversational data only as much as it fulfills a definite service improvement or regulatory justification, Pinco Casino lowers unnecessary exposure.