1. General Information
At www.tripscasino.com (hereinafter also "Casino", "website", "we", "us", or "our"), we recognize the importance of protecting your personal information. This Privacy Policy (hereinafter also "Policy") outlines how we and our subsidiaries collect, use, disclose, and safeguard your personal data in compliance with applicable laws, including but not limited to the Personal Information Protection and Electronic Documents Act (PIPEDA) and the General Data Protection Regulation (GDPR).
This Privacy Policy applies to our website (www.tripscasino.com), services, and any interaction you have with us.
This website is intended solely for individuals aged 18 and over. We do not knowingly collect personal data from anyone under this age. If we become aware that we have inadvertently collected personal data from a person under 18, particularly due to misuse of our website, we will take appropriate steps to handle such data in accordance with applicable laws.
2. About Us
The website www.tripscasino.com is owned and operated by Novatrix SRL (hereinafter also "Company", "website", "we", "us", or "our"), incorporated under the laws of Costa Rica with company registration number 3-102-893958 and having its registered address at Province 03 of Cartago, County 07 of Oreamuno, Potrero Cerrado, North Side of Manuel Ávila Camacho School, Costa Rica.
As the owner and operator of the website, we serve as the Data Controller. We determine how and why your personal data is processed, as outlined in this Policy.
To ensure compliance with legal requirements regarding personal data processing, we have appointed a Data Protection Officer (DPO). If you have questions, wish to exercise your rights, or file a complaint, you may contact the DPO at DPO@novatrixsrl.net.
3. Types of Personal Data, Processing Purposes, Legal Basis, and Data Sources
We collect and process personal data to deliver our services, comply with legal obligations, and ensure a secure gaming environment. Personal data refers to any information that can identify you directly or indirectly.
4. Categories of Data We Process
- Identity Data: full name, username, date of birth, gender, nationality, identification numbers.
- Contact Details: residential address, proof of address documents, email, phone number.
- Financial Data: bank details, payment card data, source of funds or wealth.
- Transaction Data: deposits, withdrawals, and transaction history.
- Gaming Data: games played, login/logout times, wagers, bonuses, responsible gaming history.
- Technical Data: IP address, location, browser, OS, platform, and access technology.
- Marketing and Communication Data: preferences and communications with us.
5. Purposes of Processing and Legal Basis
Service Delivery: account management, transactions, verification, promotions. Legal basis: performance of a contract.
Compliance with Legal Obligations: AML, KYC, responsible gaming, reporting. Legal basis: legal obligation.
Fraud Prevention and Risk Management: fraud detection, abuse prevention. Legal basis: legitimate interest.
Marketing and Personalization: promotional communications. Legal basis: consent and/or legitimate interest.
Analytics and Service Improvement: traffic analysis, UX optimization. Legal basis: legitimate interest.
Security Assurance: platform monitoring and protection. Legal basis: legitimate interest and legal obligation.
6. Sources from Which We Collect Data
- Directly from you during registration or communication
- Verification and KYC providers
- Financial institutions and payment providers
- AML and PEP databases
- Regulatory authorities and responsible gaming databases
- Business partners and analytics providers
7. Disclosure of Personal Information
We may share personal data with trusted third parties, including group members, game providers, payment providers, marketing partners (with consent), regulatory authorities, AML/KYC tools, communication service providers, and professional advisors.
All third parties process data lawfully, securely, and strictly for defined purposes. We do not permit third parties to use your data for their own purposes.
8. International Data Transfers
- Standard Contractual Clauses (SCCs)
- Transfers to countries with adequate protection standards
9. Data Retention
Personal data is retained only as long as necessary for the purposes collected. Due to AML requirements, data is kept for at least five years after account closure.
Anonymized data may be retained for service improvement and marketing analysis.
10. Consent and Your Rights
- Withdraw consent
- Access, correct, or delete personal data
- Restrict or object to processing
- Request data portability
- Opt-out of marketing
- Lodge complaints with authorities
11. Automated Decision Making
We do not generally rely on fully automated decision-making. Where applicable, you will be informed as required by law.
12. Data Security
We apply technical, physical, and administrative safeguards to protect your data. Access is restricted to authorized personnel only.
Your account is protected by unique credentials and optional two-factor authentication (2FA).
13. Changes to This Privacy Policy
We may update this Policy periodically. We encourage you to review it regularly.
14. Contact Information
If you have questions about this Privacy Policy, contact our DPO at DPO@novatrixsrl.net or reach out to our support team via email or live chat.