Privacybeleid van Pinup Casino in Nederland

This privacy policy governs the processing of personal data by Pinup Casino in relation to users located in the Netherlands. The document establishes how information is collected, recorded, organized, structured, stored, adapted, altered, retrieved, consulted, used, disseminated, made available, aligned, combined, restricted, erased, or destroyed during the provision of remote gambling services. Operational transparency serves as a foundational principle of this framework, ensuring strict adherence to the General Data Protection Regulation and relevant Dutch regulatory requirements. Lawful processing obligations dictate every administrative and technical measure applied to player accounts, identity verification protocols, and payment transactions. Comprehensive security safeguards protect all administrative systems against unauthorized access, accidental loss, or unlawful disclosure. By utilizing the platform, data subjects acknowledge the implementation of these practices as detailed below, which define the legal parameters governing information administration within the jurisdiction.

Categories of Personal Data Collected and Processed

The processing activities conducted by Pinup Casino encompass multiple categories of information supplied directly by the data subject or generated automatically during platform interaction. Registration details comprise full legal names, dates of birth, residential addresses, electronic mail addresses, and telephone numbers supplied during account creation. Identification data includes scanned copies of government-issued identity documents, passports, and utility bills required for mandatory Know Your Customer procedures. Transactional information involves records of deposits, withdrawals, payment methods, bank account identifiers, and financial histories linked to the user profile. Technical data consists of internet protocol addresses, browser types, operating systems, device identifiers, and connection timestamps collected via standard server logs. Compliance-related records incorporate interaction histories with support services, responsible gambling self-exclusion logs, and documented source of funds inquiries necessary for regulatory oversight.

Purposes of Processing and Lawful Bases Under Regulation

Personal data collected by Pinup Casino is utilized strictly for designated operational and administrative purposes. Verification procedures ensure compliance with statutory age limits and anti-money laundering mandates. Transaction processing enables the execution of deposits and payouts through authorized financial intermediaries. Regulatory compliance obligates the retention and examination of records to satisfy Dutch supervisory authorities and prevent illicit financial activities. Account operations require continuous data administration to maintain user profiles, administer balances, and deliver core functional access. The lawful bases governing these activities derive from Article 6 of the General Data Protection Regulation. Contractual necessity justifies data processing required to deliver gambling services. Legal obligation compels the retention of financial and identity records. Legitimate interest applies to network security maintenance, fraud prevention, and platform integrity assurance, provided such interests do not override the fundamental rights of the data subject.

Infrastructure Security, Storage Architecture, and Retention Policies

All collected information resides on secure servers located within the European Economic Area or jurisdictions offering equivalent data protection standards. Technical safeguards include encryption protocols for data in transit and at rest, firewalls, segmented network architectures, and multi-factor authentication for administrative access. Access controls restrict data visibility strictly to authorized personnel whose professional duties necessitate such access under strict confidentiality obligations. Retention periods are determined by statutory requirements under Dutch civil, tax, and anti-money laundering legislation. Financial records and identification documents are retained for the legally mandated duration, typically five to seven years following account closure. Upon expiration of the applicable retention period, personal data undergoes secure deletion, permanent anonymization, or archiving in accordance with internal destruction schedules, preventing further recovery or processing.

Data Subject Rights and Request Execution Procedures

Individuals located in the Netherlands possess specific rights regarding their personal data under applicable legislation. The right of access permits users to request confirmation regarding whether their data is processed and obtain a copy of such data. The right to rectification enables individuals to correct inaccurate or incomplete information held within the system. The right to erasure applies under specific circumstances, such as when data is no longer necessary for the purposes for which it was collected, subject to statutory retention obligations. The right to restriction of processing allows users to limit data utilization during administrative reviews. The right to data portability grants the capacity to receive provided data in a structured, commonly used format. Objections to processing based on legitimate interests may be submitted at any time. Executing these rights requires mandatory identity verification to prevent unauthorized disclosure. Requests are processed within statutory timeframes established by supervisory authorities.