The protection of personal data represents a central part of every service offered by Pinco Casino. Users situated in Poland use a platform that completely aligns its data retention procedures with the General Data Protection Regulation and the Polish Act on the Protection of Personal Data. This policy defines how long various categories of information are stored, the legal bases that validate each retention period, and the rights individuals hold over their data. The approach is built on the principle of storage limitation, meaning no record is kept for more than necessary for its initial business or legal purpose. Regulatory obligations related to anti-money laundering, responsible gambling, and tax reporting directly shape retention schedules. The same thorough care extends to the data generated through the Pinco Casino affiliate programme, guaranteeing partners gain from the same transparent and lawful handling. A dedicated team consistently reviews these practices so that every user, be it a player or an affiliate, can interact with clear expectations about how their information is managed.

Common Questions

What is the main legal basis for retaining my personal data?

Pinco Casino depends on a mix of justifications including necessity for contract performance for delivering gaming services, legal obligations under anti-money laundering and tax laws, and lawful interests for fraud prevention. Permission is employed for marketing communications and certain cookies, and it can be withdrawn at any time without influencing the validity of processing based on other grounds already in progress.

Can I request immediate deletion of my entire player record?

You may send a deletion request at any time, and Pinco Casino will assess it without delay https://pinco.net.pl/legal-and-affiliates/. Nevertheless, if particular files are subject to a mandatory storage duty, they cannot be deleted immediately. In such cases, the processing of those records is restricted so they are stored securely but not employed for other purposes until the requirement expires.

What is the retention period for ID documents after closing an account?

Government-issued identity documents and proof of address are normally held for five years following account closure to meet anti-money laundering regulations. After this period, digital copies are permanently destroyed from active systems and backups. Only compliance personnel with a clear necessity have access to these files during the holding timeframe.

Is data from the affiliate program included in this policy?

Absolutely, the data retention policy entirely covers affiliate partners. Personal and payment information linked to an affiliate account is kept for the duration of the partnership and five years after termination to meet tax and commercial record-keeping requirements. Aggregated referral statistics without personal identifiers may be retained longer for business analysis.

What happens to my data if I am inactive for a long period?

After a set dormancy period defined in the terms, your account may be marked as inactive. Data remains stored but is moved to a restricted-access environment. Marketing communications cease, and the clock for final deletion begins once any overriding legal obligations expire. You can reactivate your account within that window by completing a verification process.

Is notification provided prior to data removal?

Not in every scenario. If deletion occurs because the retention period has naturally expired, automated processes remove data without prior individual notification. However, if Pinco Casino decides to delete data earlier for policy reasons, or when responding to a justified erasure request, a confirmation of deletion is sent to the registered email address once the operation completes.

How are backup copies handled after data deletion?

Once a deletion request is completed or a storage period expires, data is removed from production databases immediately. Backup tapes and cloud snapshots are renewed in a cyclical manner, and personal data within those backups is rendered inaccessible once the main deletion is executed. Backup media are completely renewed according to a documented schedule to prevent residual data persistence.

Policy Revisions and Notification Processes

The context in which Pinco Casino works changes through new regulatory directives, technological advancements, and adjustments in business operations. Consequently, the data storage policy undergoes periodic review at least once per year, with temporary changes prompted by major legal changes or changes in service. When an revised version is implemented, all users from Poland with an active account receive direct notice via the email address stored in their profile at least fourteen days before the modifications take effect. For terminated accounts that still have stored data, a announcement is posted on the main website and pushed through any available communication channel where legally permissible. The history of versions is completely recorded, and earlier versions of the document remain reachable upon demand. Individuals affected by substantially different retention terms are offered the possibility to exercise their rights before the new policy takes effect, ensuring that no person is unexpectedly affected by an extended retention period they did not anticipate.

Storage Durations for Multiple Data Types

Current Account Records

While a gambler account is operational, all account data, game activity, bonus engagement data, and responsible gambling limits are stored in instant-access storage. This constant presence enables the platform to provide tailored features, enforce deposit limits, and present correct account figures. The fakt.pl instant an account enters dormancy or a user requests closure, the status of the data moves into a limited state. Nonetheless, the retention clock does not commence instantly deleting everything. Pinco Casino uses a formal waiting phase before permanent removal begins, primarily to guard against dishonest sign-ups and chargeback claims. Even during this waiting period, marketing communications stop immediately if approval is withdrawn. The interaction between active and after-closure states of data shows how retention periods are not monolithic but change according to the changing need and regulatory requirement tied to each information class.

Communication and Support Logs

Records from real-time chats, electronic messages, and phone call recordings with customer service staff are stored for a briefer period versus financial records. These records are employed to resolve disputes, enhance customer support, and demonstrate compliance with ethical play engagements. The standard retention term for support communications is a year and a half from the day of the last interaction unless a particular instance is flagged for a longer hold due to an active dispute or official investigation. Following this period, the content is purged through systematic removal routines that remove files, message contents, and information tags from the client management software. Call logs are processed with the identical schedule, and players are notified about the recording at the outset of each call. By retaining private chat information only as long as it fulfills a specific performance check or legal defence purpose, Pinco Casino lowers unnecessary exposure.

Protective Protocols Protecting Retained Data

System Security

All retained data, regarding Polish players or global affiliates, is shielded by a defense-in-depth structure. Storage encryption using AES-256 standard secures databases and backup storage, while all data during transfer is secured through TLS protocols. The network perimeter is watched by intrusion detection systems that flag abnormal access patterns, and vulnerability scans are performed on a recurring schedule. Pseudonymisation techniques are applied to data sets used in testing environments, guaranteeing that development and quality assurance processes never expose live personal information. Access to stored records is strictly role-based, with multi-factor authentication required for any data retrieval by staff. Logs of every administrative data access event are likewise kept and audited to detect potential misuse. These technical controls are continuously assessed against evolving threats, with regular penetration testing conducted by independent security firms to validate the resilience of the storage infrastructure.

Organisational and Staff Measures

Technology alone cannot guarantee data safety; therefore Pinco Casino establishes comprehensive organisational measures. All employees participate in mandatory data protection training during onboarding and undergo annual refresher sessions that address retention schedules, breach reporting procedures, and the specific requirements of handling Polish user data. Internal policies enforce the principle of least privilege, assigning data access only to roles whose functions strictly require it. A designated Data Protection Officer oversees compliance, carries out periodic retention audits, and serves as the point of contact for supervisory authorities. Any detected data breach is quickly reviewed, documented, and notified to the relevant regulator and affected individuals within the legally mandated 72-hour window where a risk exists. Vendor agreements with cloud storage and backup providers feature strict data processing addenda that limit retention to instructed periods, making certain that third parties do not hold copies of personal data beyond the necessary term.

Affiliate Programme Record Keeping and Agreements

Pinco Casino considers affiliates as commercial partners whose data handling needs merge agreement fulfillment with privacy obligations. Upon signing up for the program, an affiliate consents to the acquisition of work-related data, tax identifiers, and payment details. The conditions of the affiliate agreement clearly state the retention schedule: all private data connected to the collaboration is retained for the term of the contract, and for half a decade after its end to satisfy audit requirements. During this data-keeping phase, affiliates can ask for an extraction of their revenue records and visitor statistics. The site also processes combined referral information that links an affiliate to user behavior, but never reveals personal player information to the affiliate. Cookie-based tracking data used to credit sign-ups adheres to a much shorter storage period, commonly expiring thirty days after the final click, making sure that privacy-focused approaches are built into the evaluation instruments that affiliates trust.

Categories of Personal Data Retained

User Identity and Authentication Data

To comply with mandatory know-your-customer procedures, Pinco Casino stores versions of government-issued identification documents, proof of address, and payment method verification items. This category includes full name, date of birth, nationality, and the visual elements of uploaded files. The retention of such sensitive information adheres to the legal obligation basis under anti-money laundering regulations. Even after account closure, identity documentation typically remains archived for a duration of five years, mirroring the standard mandated by financial regulatory agencies. During this time, access is strictly limited to compliance and fraud prevention teams. After the retention window ends, digital documents and associated metadata are permanently deleted from live systems and backups in a fashion that prevents reconstruction. The platform never uses this verification data for marketing goals, preserving a strict separation between regulatory files and commercial profiles.

Financial and Transaction Records

Every payment, withdrawal, bonus adjustment, and wagering activity generates a financial record that represents part of the permanent audit trail. Such data encompasses transaction identifiers, amounts, currency, payment method details, and timestamps. Polish tax law, combined with EU anti-money laundering directives, obligates the operator to keep these records for a minimum retention period that lasts beyond the closure of a player account. Typically, the retention term remains at five years from the date of the last financial movement, though records involved in a dispute or legal claim are held until resolution plus an additional safeguarding period. This extended storage assures that Pinco Casino can react to requests from tax authorities, law enforcement agencies, and financial intelligence units without delay. No transaction data is sold or repurposed for secondary profiling, and automatic anonymisation processes begin immediately once the statutory retention obligation expires.

Affiliate Programme Data

The partner program produces a distinct data set that contains the partner’s business name, tax identification number, payment instructions, performance metrics, and records of referred players in hashed form. Partner contracts are handled as business documents, implying their retention is controlled by both commercial law and tax reporting requirements. Pinco Casino keeps full partnership records for the duration of the active agreement plus five years after termination. During this period, the affiliate retains the right to access historical commission reports and payment ledgers. Usage data tied to affiliate tracking links remains stored for a shorter interval consistent with cookie consent durations, after which it is combined and stripped of identifiers. This balanced approach protects the legitimate interest of the affiliate in verifying past earnings while respecting the privacy of referred players whose individual activity becomes unidentifiable after the cookie window ends.

User Entitlements Under GDPR and Local Law

Right of Access and Amendment

Each user in Poland possesses the right to get confirmation whether Pinco Casino processes their personal data and to obtain a copy of that data in a organized, standard format. Responding to such access requests remains a priority, and the specialized data protection team aims to deliver the information within the legal one-month deadline. For complex requests, this period can be extended by two extra months with explicit notification to the individual. Besides access, the right to rectification permits individuals to amend inaccurate or incomplete data without excessive delay. This is specifically pertinent when identity documents have expired or when a player requires updating a registered payment method. The platform has incorporated a self-service interface that allows immediate correction of contact details, while more delicate changes related to financial identity triggers a verification step to deter fraudulent modification efforts.

Erasure Right and Restriction

The right to erasure, frequently called the right to be forgotten, is honoured by Pinco Casino once the grounds specified in Article 17 of the GDPR are met. If the data is no longer necessary for the original purpose, consent is revoked, or the processing was illegal, deletion requests are executed with urgency. However, this right is not unlimited. Where legal obligations such as anti-money laundering statutes mandate continued storage, the erasure request results in restriction of processing rather than full deletion. During a restriction period, data stays stored in a secure, access-limited archive but is not utilized for any other purpose. Users are notified of the specific legal provision overriding their request, along with the projected date when erasure will become achievable. This transparent balancing of rights and duties assures individuals that lawful regulatory requirements do not become an excuse for indefinite data hoarding.

Regulatory Structure and Licensing

Pinco Casino operates under a gaming licence granted by the regulatory authority of Curaçao, a jurisdiction that applies strict data protection obligations on its licensees. For users accessing the platform from Poland, the licence conditions are complemented by mandatory compliance with the European Union’s data protection regime. The GDPR acts as the primary legal foundation, while specific Polish data protection legislation introduces further refinements regarding the retention of personal information. Under this dual framework, all personal data processing must meet at least one lawful basis, such as contractual necessity, legal obligation, legitimate interest, or explicit consent. Retention periods are directly tied to those bases. For example, data processed to perform the player contract is retained for the duration of the relationship plus applicable limitation periods for potential claims. In contrast, records tied to anti-money laundering directives are kept for a minimum of five years after the last transaction, following statutory mandates that outweigh shorter user preferences. This layered legal structure assures that data is neither disposed of prematurely, risking non-compliance, nor held indefinitely without justification.

Range of the Data Storage Policy

The policy governs all personal data collected from two distinct groups: registered players holding active or closed accounts within the Pinco Casino environment, and individuals participating in the Pinco Casino affiliate programme. It includes information submitted during registration, documents submitted for identity verification, transaction logs, communications with customer support, and technical data created by browsing activity. For affiliates, the policy governs contact details, payment information, traffic statistics, and any contractual correspondence that emerges during the partnership. Data gathered through cookies and similar tracking technologies is also incorporated, with retention tailored to the specific purposes of analytics and marketing consent. Importantly, the policy does not extend to anonymised or aggregated data from which individuals can no longer be identified. Such statistical material may be stored indefinitely because it falls outside the definition of personal data under GDPR. By specifying this scope with precision, Pinco Casino guarantees that all parties know exactly which categories of information are subject to documented retention rules and which fall outside regulated processing.