This document outlines how GoldRun Casino processes personal data for players in France. It addresses the GoldRun Casino website, player accounts, payments, customer support, responsible gaming tools, and the affiliate programme. The notice follows the EU General Data Protection Regulation and the French Data Protection Act. GoldRun Casino is the data controller for all processing described here. Players should read this notice in conjunction with the general terms and conditions and any terms tied to specific promotions. The objective is to spell out what data we collect, why we process it, how long we keep it, and what rights you have.
1. Data Administrator and Scope
GoldRun Casino decides how and why player data is handled, establishing it as the data controller for its platform and related services. In France, the supervisory authority is the Commission Nationale de l’Informatique et des Libertés (CNIL). This notice pertains to registered players, website visitors, and anyone who interacts with the affiliate programme. It does not cover third-party websites you access through links, including payment providers or affiliate partner pages. Those third parties maintain their own privacy policies. The scope encompasses data collected online, by email, through customer support, and via mobile or desktop use of GoldRun Casino services.
2) Osobní údaje, které shromažďujeme
GoldRun Casino získává několik typů osobních údajů, aby mohlo provozovat své služby, dodržovalo zákonné povinnosti a předcházelo podvodům. Část údaje nám dáváte osobně během registrace a ověřování. Jiné údaje jsou vytvářeny automaticky, když navštěvujete webové stránky nebo napíšete podporu. Přesné kategorie závisí na tom, zda pouze prohlížíte stránky, si vytvoříte účet, zašlete platbu nebo se zapojíte do affiliate programu. GoldRun Casino limituje sběr na údaje, které jsou nutné pro konkrétní účel. Hlavní kategorie jsou popsány níže.
Oddíl 2.1
Osobní údaje zahrnují celé jméno, datum narození, státní příslušnost a údaje z identifikačního dokladu, pokud je vyžadováno ověření. Kontaktní údaje obsahují e-mailovou adresu, poštovní adresu a telefonní číslo. Finanční údaje obsahují podrobnosti o platební metodě, záznamy o vkladech a výběrech, identifikátory transakcí a v relevantních případech částečné informace o kartě. GoldRun Casino aplikuje tyto informace k vytváření a správě účtů, prověřování věku a polohy, zpracování plateb a splnění požadavků na poznej svého klienta. Pro hráče ve Francii mohou být adresa a identifikační údaje porovnávány proti schváleným databázím, aby se zajistilo, že hráč je starší 18 let a nenachází se v omezeném území. Toto zpracování naplňuje hráčskou smlouvu a zákonné povinnosti podle francouzských hazardních předpisů.
2.2
System information is collected when you visit GoldRun Casino services. It covers IP address, browser type, device identifiers, operating system, screen resolution, language settings, and approximate location based on the IP address. Usage data covers pages visited, games played, session duration, clicks, and interactions with promotions. GoldRun Casino uses this information to preserve service security, optimize website performance, and personalise the player experience where consent has been given. Some technical data also assists identify unauthorised access or account takeovers. The subcategory below specifies data collected by automated means in more detail.
2.2.1 Device and Connection Data
Hardware and network information includes hardware model, browser version, operating system version, mobile network information, and unique identifiers such as advertising IDs or cookie values. GoldRun Casino handles this data to guarantee the platform works correctly across different devices and to identify technical problems. Connection data also helps security teams identify suspicious login patterns, like logins from new devices or unusual locations. When you contact support about a technical issue, device data may be used to simulate the problem and find a fix. This processing serves GoldRun Casino’s legitimate interests in ensuring the service stable and preventing fraud.
Cookies and Tracking Technologies
GoldRun Casino employs cookies, pixels, and similar technologies to enable core functionality, assess performance, and support affiliate attribution. Some cookies are essential for the website to work, such as those that preserve your session during a session or maintain security settings. Other cookies require consent under French law. The cookie consent tool offers detailed information about each category and allows you to modify preferences at any time. Non-essential cookies are not set until consent is given, unless a limited exemption applies for certain analytics features.
7. Storage and Safeguarding
GoldRun Casino stores personal data solely for the required period to meet the purposes described in this notice and to meet legal obligations. Account data is kept while the account remains active and for a certain period after closure. Financial transaction records are stored under anti-money laundering and tax rules, which could require keeping records for 5 to 10 years depending on the transaction type. Technical logs utilized for security are typically kept for a shorter period, unless an investigation necessitates longer preservation. After the retention period expires, data is removed or made anonymous. GoldRun Casino implements encryption, role-based access controls, multi-factor authentication, and regular security testing to protect personal data.
Eight. Data Receivers and International Transfers
GoldRun Casino shares personal data with a restricted set of parties. These include payment service providers, identity verification providers, hosting and security vendors, customer support platforms, and regulatory authorities. Each processor is bound by a data processing agreement that controls use of the data to the contracted service. Regulators could request data for compliance audits or investigations. GoldRun Casino does not disclose personal data to public authorities unless there is a lawful basis. Affiliates obtain only the specific attribution data specified in Section 5. Some processors could operate outside the European Economic Area. When that is the case, GoldRun Casino applies adequacy decisions, standard contractual clauses, or binding corporate rules to ensure appropriate safeguards.
3) 3. Legal Grounds for Data Processing
GoldRun Casino relies on particular justifications under the GDPR for each processing activity. The key justifications consist of contract performance, statutory duty, legitimate interests, and permission. Opening an account and payment processing are based on the requirement to execute the player agreement. Identity verification and storage of financial data rest on legal obligations under French gambling and AML legislation. Preventing fraud and system protection rely on legitimate interests, balanced against user rights. Marketing communications and non-essential cookies rest on approval. You can withdraw your approval at any time without impacting the validity of previous data handling. The applicable basis for each activity is described in this notice or obtainable upon inquiry.
- Fulfilling a contract: account setup, making deposits, withdrawals, and gameplay.
- Statutory duty: ID verification, responsible gaming records, and reporting taxes.
- Lawful interests: fraud prevention, network security, and service improvement.
- Permission: promotional communications and optional analytics or data tracking.
5. Affiliate Programme and Data Sharing
GoldRun Casino manages an affiliate programme through which third-party websites market the casino in exchange for commission. When you arrive through an affiliate link, certain data is utilized to assign the visit and any later registration or deposit to the correct affiliate. The affiliate programme is controlled by separate terms, but this privacy notice describes the personal data implications for players in France. Affiliate tracking utilizes cookies, click identifiers, and transaction data. GoldRun Casino provides only limited attribution data with affiliate partners and does not provide affiliates with full payment details or identity documents.
Section 5.1 Affiliate Tracking and Attribution
Affiliate tracking begins when you select a link on an affiliate website https://goldrun-fr.fr/legal-and-affiliates/. A click identifier or affiliate cookie can be placed on your device. If you later register and make a qualifying deposit, GoldRun Casino uses the identifier to compensate the referring affiliate. The tracked data includes the affiliate ID, campaign ID, click time, device category, and conversion status. This processing is essential for the performance of the affiliate agreement and for accurate commission calculation. You can control affiliate cookies through the cookie consent tool or browser settings. Clearing cookies might prevent an affiliate from receiving credit for a later visit.
4. How GoldRun Casino Uses Player Data
GoldRun Casino utilizes personal data to deliver its gaming services in a safe and lawful manner. The main purposes encompass registering accounts, processing payments, providing customer support, preventing fraud, meeting regulatory reporting duties, and sending information about promotions where permitted. The data also aids in evaluating platform performance and enhance game selection. Each purpose has a legal basis and associated defined retention periods. GoldRun Casino does not sell personal data to third parties. When data is provided to service providers, the sharing is restricted to what is necessary to perform a specific task under a written contract.
9. Rights of Players Under the GDPR
Players in France possess rights over their personal data under the GDPR along with the French Data Protection Act. GoldRun Casino offers a privacy request process to exercise these rights. The main rights are listed below. Identity verification may be required before a request is fulfilled. GoldRun Casino addresses valid requests in under one month, extendable by two further months when requests are complicated. In case a request is rejected, you will get a clear explanation along with details on how to complain to the CNIL.
- Access right: receive confirmation and a copy of personal data processed.
- Rectification right: amend inaccurate or incomplete data.
- Right to erasure: demand removal where no legal basis requires retention.
- Right to restriction: restrict processing in specific situations.
- Right to transfer data: get specific data as a structured, machine-readable file.
- Right to object: challenge processing grounded in legitimate interests.
- Withdrawal right: withdraw consent at any time for marketing or optional cookies.
10. Changes to This Notice and How to Reach Us
GoldRun Casino can modify this privacy notice if its offerings, legal obligations, or data handling are updated. Material updates will be notified through the platform or by email when necessary. Players are encouraged to check the notice from time to time, especially before performing significant account updates or providing new personal data. Continued use of the service after a notice change does not limit the legal rights provided under the GDPR. If a change demands new approval, GoldRun Casino will ask for that consent on its own. You can contact the data protection department through the support hub or the legal section of the platform. You also have the option to file a grievance with the CNIL.