This document outlines how GoldRun Casino manages personal data for players in France https://goldrun-fr.fr/legal-and-affiliates/. It addresses the GoldRun Casino website, player accounts, payments, customer support, responsible gaming tools, and the affiliate programme. The notice adheres to the EU General Data Protection Regulation and the French Data Protection Act. GoldRun Casino is the data controller for all processing described here. Players should read this notice together with the general terms and conditions and any terms tied to specific promotions. The aim is to explain what data we collect, why we process it, how long we keep it, and what rights you have.

I. Data Controller and Range

GoldRun Casino determines how and why player data is managed, establishing it as the data controller for its platform and related services. In France, the supervisory authority is the Commission Nationale de l’Informatique et des Libertés (CNIL). This notice applies to registered players, website visitors, and anyone who interacts with the affiliate programme. It does not cover third-party websites you access through links, including payment providers or affiliate partner pages. Those third parties maintain their own privacy policies. The scope covers data collected online, by email, through customer support, and via mobile or desktop use of GoldRun Casino services.

3) 3. Legal Grounds for Processing

GoldRun Casino bases its operations on specific justifications under the GDPR for every processing operation. The main bases consist of contract performance, statutory duty, justified interests, and approval. Opening an account and payment processing rest on the requirement to execute the player agreement. Identity verification and keeping financial records rest on statutory requirements under French gambling and money laundering regulations. Preventing fraud and system protection are based on lawful interests, considered alongside customer rights. Marketing communications and non-essential cookies depend on approval. You can withdraw your permission at any moment without impacting the lawfulness of previous data handling. The applicable basis for each operation is described in this notice or available on request.

• Performance of a contract: account registration, making deposits, withdrawals, and playing games.
• Legal obligation: identity verification, responsible gaming records, and tax filings.
• Lawful interests: anti-fraud measures, cybersecurity, and improving the service.
• Consent: advertising messages and non-mandatory analytics or data tracking.

9. Player Rights According to the GDPR

French players are entitled over their personal data as per the GDPR along with the French Data Protection Act. GoldRun Casino makes available a privacy request process to assert these rights. The main rights are listed below. Identity verification might be necessary before a request is handled. GoldRun Casino handles valid requests inside one month, extendable by two further months when requests are complicated. In case a request is rejected, you will get a clear explanation and information about how to complain to the CNIL.

• Right of access: receive confirmation along with a copy of personal data processed.
• Right to correct: rectify inaccurate or incomplete data.
• Erasure right: ask for deletion where no legal basis requires retention.
• Restriction right: restrict processing in specific situations.
• Right to transfer data: receive certain data in a structured and machine-readable form.
• Objection right: object to processing founded on legitimate interests.
• Right to revoke consent: retract consent whenever desired regarding marketing or optional cookies.

2.

GoldRun Casino sbírá několikero kategorií osobních údajů, aby zajišťovalo své služby, splnilo zákonné povinnosti a zamezilo podvodům. Některé údaje nám dáváte osobně během registrace a ověřování. Další údaje jsou vytvářeny automaticky, když navštěvujete webové stránky nebo napíšete podporu. Přesné kategorie závisejí na tom, zda pouze prohlížíte stránky, založíte účet, provedete platbu nebo se zapojíte do affiliate programu. GoldRun Casino redukuje sběr na údaje, které jsou nutné pro konkrétní účel. Hlavní kategorie jsou popsány níže.

2.1 Identifikační, kontaktní a finanční údaje

Identifikační údaje pokrývají celé jméno, datum narození, státní příslušnost a údaje z identifikačního dokladu, pokud je vyžadováno ověření. Kontaktní údaje obsahují e-mailovou adresu, poštovní adresu a telefonní číslo. Finanční údaje pokrývají podrobnosti o platební metodě, záznamy o vkladech a výběrech, identifikátory transakcí a v relevantních případech částečné informace o kartě. GoldRun Casino používá tyto informace k vytváření a správě účtů, prověřování věku a polohy, zpracování plateb a plnění požadavků na identifikaci zákazníka. Pro hráče ve Francii mohou být adresa a identifikační údaje prověřovány proti schváleným databázím, aby se ověřilo, že hráč je starší 18 let a nenachází se v omezeném území. Toto zpracování zajišťuje hráčskou smlouvu a zákonné povinnosti podle francouzských hazardních předpisů.

Oddíl 2.2

Device data is generated when you use GoldRun Casino services. It contains IP address, browser type, device identifiers, operating system, screen resolution, language settings, and approximate location based on the IP address. Usage data includes pages visited, games played, session duration, clicks, and interactions with promotions. GoldRun Casino uses this information to maintain service security, enhance website performance, and tailor the player experience where consent has been given. Some technical data also helps detect unauthorised access or account takeovers. The subcategory below breaks down data collected by automated means in more detail.

Device and Connection Information

System and link details includes hardware model, browser version, operating system version, mobile network information, and unique identifiers such as advertising IDs or cookie values. GoldRun Casino processes this data to ensure the platform operates smoothly across different devices and to resolve technical problems. Connection data also enables security teams identify suspicious login patterns, like logins from new devices or unusual locations. When you contact support about a technical issue, device data may be used to replicate the problem and implement a fix. This processing serves GoldRun Casino’s legitimate interests in keeping the service stable and preventing fraud.

4.

GoldRun Casino utilizes personal data to offer its gaming services in a safe and lawful manner. The main purposes include registering accounts, processing payments, providing customer support, preventing fraud, meeting regulatory reporting duties, and sending information about promotions where permitted. The data also aids in assessing platform performance and optimize game selection. Each purpose is linked with a legal basis and with defined retention periods. GoldRun Casino does not sell personal data to third parties. When data is provided to service providers, the sharing is limited to what is necessary to perform a specific task under a written contract.

8. Recipients of Data and Cross-Border Transfers

GoldRun Casino provides personal data to a limited set of recipients. These encompass payment service providers, identity verification providers, hosting and security vendors, customer support platforms, and regulatory authorities. Each processor is obligated by a data processing agreement that limits use of the data to the contracted service. Regulators could request data for compliance audits or investigations. GoldRun Casino never disclose personal data to public authorities unless there is a lawful basis. Affiliates receive only the restricted attribution data outlined in Section 5. Some processors might operate outside the European Economic Area. When that is the case, GoldRun Casino employs adequacy decisions, standard contractual clauses, or binding corporate rules to maintain appropriate safeguards.

7. Retention and Protection

GoldRun Casino keeps personal data solely for the required period to satisfy the purposes set out in this notice and to fulfill legal obligations. Account data is stored while the account remains active and for a defined period after closure. Financial transaction records are retained under anti-money laundering and tax rules, which may require keeping records for 5 to 10 years depending on the transaction type. Technical logs employed for protection are usually retained for a shorter time, unless an investigation requires longer preservation. After the retention period ends, data is removed or made anonymous. GoldRun Casino applies encryption, role-based access controls, multi-factor authentication, and regular security testing to safeguard personal data.

6.

GoldRun Casino uses cookies, pixels, and similar technologies to deliver core functions, track performance, and support affiliate attribution. Some cookies are essential for the website to work, such as those that maintain your login during a session or enforce security settings. Other cookies require consent under French law. The cookie consent tool gives detailed information about each category and allows you to modify preferences at any time. Non-essential cookies are not placed until consent is given, unless a limited exemption holds for certain analytics features.

5th Affiliate Programme and Data Sharing

GoldRun Casino runs an affiliate programme via which third-party websites market the casino in exchange for commission. When you arrive through an affiliate link, certain data is employed to assign the visit and any later registration or deposit to the correct affiliate. The affiliate programme is governed by separate terms, but this privacy notice outlines the personal data implications for players in France. Affiliate tracking uses cookies, click identifiers, and transaction data. GoldRun Casino provides only limited attribution data with affiliate partners and does not supply affiliates with full payment details or identity documents.

5.1st Affiliate Tracking and Attribution

Affiliate tracking begins when you select a link on an affiliate website. A click identifier or affiliate cookie could be placed on your device. If you later register and make a qualifying deposit, GoldRun Casino utilizes the identifier to compensate the referring affiliate. The tracked data comprises the affiliate ID, campaign ID, click time, device category, and conversion status. This processing is necessary for the performance of the affiliate agreement and for accurate commission calculation. You can control affiliate cookies through the cookie consent tool or browser settings. Clearing cookies may prevent an affiliate from receiving credit for a later visit.

10. Modifications to This Notice and Contact Information

GoldRun Casino can modify this privacy notice when its services, legal requirements, or data processing change. Material revisions will be communicated through the site or by email as needed. Customers are advised to check the notice regularly, particularly before performing significant account modifications or sending new personal data. Further use of the service after a notice change does not reduce the legal rights granted under the GDPR. If a change demands new consent, GoldRun Casino will seek that consent separately. You can reach the data protection team through the support hub or the legal area of the site. You also have the option to submit a grievance with the CNIL.