Player Privacy Notice
Privacy Policy
Operator of this Shop and controller responsible for data processing:
Shop: dein Casino
Shop owner: dein Shopbetreiber
Contact: dein Shopbetreiber
– hereinafter the "Operator" –
1. Controller and Role of the Platform Provider
1. The controller responsible for processing the user's personal data in connection with this Shop is the Operator named above. Privacy enquiries are to be directed to the Operator via the contact details given above or via the Shop's chat function.
2. The Shop is provided under the brand and domain OnlyEntertain (onlyentertain.com). OnlyEntertain is a product of POS Entertainment s.r.o., Bořivojova 878/35, 130 00 Prague 3, Czech Republic (hereinafter "Platform Provider"). The Platform Provider operates the technical infrastructure (platform, games, credits system, hosting) and, in doing so, processes the user's personal data exclusively on behalf of and under the instructions of the Operator as a processor. The Platform Provider does not use the user's data for its own purposes and has no legal relationship with the user.
3. The Operator has not appointed a data protection officer unless otherwise indicated in the Operator details above.
2. Principle of Data Minimisation
The Shop is a free entertainment offering with pseudonymous user accounts. Registration requires only a freely chosen username and a password. The Operator collects neither the user's name, address, e-mail address or telephone number nor any payment or identity-document data. The Operator is generally unable to identify the user on the basis of the account data.
3. Data Processed, Purposes and Legal Bases
3.1 User account
Username, password (stored exclusively as a cryptographic hash), time of registration, confirmation of age of majority and acceptance of the Terms of Use, account status (active, suspended, play break, self-exclusion).
Purpose: provision of the user account and performance of the user contract.
Legal basis: performance of a contract (Art. 6(1)(b) GDPR, where applicable).
3.2 Gameplay and Credits
Credit balance, allocations and use of Credits, game history (games played, stakes in Credits, results, timestamps), voided rounds.
Purpose: execution of games, keeping of the Credits account, traceability of game rounds in the event of malfunctions (clause 7 of the Terms of Use).
Legal basis: performance of a contract (Art. 6(1)(b) GDPR); legitimate interest in the integrity of gameplay (Art. 6(1)(f) GDPR).
3.3 Chat and support
Content and time of messages submitted via the chat function and of other support requests, including requests for play breaks, self-exclusion, account deletion and password recovery.
Purpose: handling of requests, implementation of player-protection measures, record-keeping.
Legal basis: performance of a contract (Art. 6(1)(b) GDPR); legitimate interest in the verifiability of requests and measures (Art. 6(1)(f) GDPR).
3.4 Technical operation, security and abuse prevention
IP address, timestamps, resources accessed, browser and device identifier (user agent), login events, session identifiers, security and error logs; analyses to detect bots, multiple accounts, exploitation of technical errors and breaches of the Terms of Use.
Purpose: provision and protection of the Shop, error analysis, enforcement of the Terms of Use.
Legal basis: legitimate interest in security, stability and contract enforcement (Art. 6(1)(f) GDPR).
Retention of log data: generally 30 days; in the event of a security incident or breach, until it has been resolved.
3.5 Territorial restrictions
Country or region derived from the IP address for the implementation of territorial restrictions (clause 14 of the Terms of Use); findings regarding circumvention of blocks (e.g. use of VPN or proxy services).
Purpose: compliance with legal requirements and the Terms of Use.
Legal basis: legal obligation or legitimate interest in lawful operation (Art. 6(1)(c) and (f) GDPR).
3.6 Display of notices in the Shop
Record of whether changes to the Terms of Use, terminations or other notices have been displayed to the user.
Purpose: proof of notification, as no means of contact exists outside the Shop.
Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
4. Recipients
1. Platform Provider (clause 1.2) as processor: hosting, operation of the platform, games and credits system, technical support, provision of the chat function. The Platform Provider may in turn engage sub-processors (in particular hosting and infrastructure providers); it is contractually bound to the Operator to comply with data-protection requirements.
2. Game providers: some of the games made available in the Shop are executed by third-party providers via the platform. Only technical session and game data that do not allow direct identification of the user are transmitted to them.
3. Authorities and courts, where there is a legal obligation to disclose.
4. No data is disclosed to any other third parties, in particular not for advertising purposes.
5. Transfers to Third Countries
Data is processed on the Platform Provider's systems in the European Union (hosting: OVHcloud, Roubaix, France). Access to the Shop is routed through a network and security service of Cloudflare, Inc. (USA), which processes connection data such as the IP address; the transfer takes place on the basis of the EU-US Data Privacy Framework, alternatively the European Commission's Standard Contractual Clauses. Where the Operator is established outside the European Union or game providers operate their systems outside the European Union, transfers take place only where an adequate level of data protection is ensured or a statutory exception applies.
6. Cookies and Storage Technologies
The Shop uses only technically necessary cookies and comparable storage technologies, in particular to maintain the login session, for security and to store display settings. These are required for the operation of the Shop and do not require consent. No cookies are used for analytics, tracking or advertising purposes.
7. Retention and Deletion
1. User account data, Credit balance and game history are stored for the term of the user contract and are deleted or anonymised within 30 days after deletion of the user account or termination of the user contract.
2. Chat and support histories are retained for up to 12 months after the respective request has been closed, unless the documentation of a player-protection measure or a breach requires longer retention.
3. Data relating to self-exclusions and account suspensions for breaches is retained beyond the end of the user contract to the extent necessary to prevent circumvention of the suspension.
4. Log data: see clause 3.4.
8. Rights of the User
1. Where the GDPR or comparable data-protection law applies, the user has the right of access, rectification, erasure, restriction of processing and data portability, and the right to object to processing based on legitimate interests.
2. As the Operator cannot identify the user outside the user account, these rights are to be exercised via the chat function from within the logged-in user account. The Operator cannot process requests that do not allow unambiguous attribution to a user account.
3. The user has the right to lodge a complaint with a data-protection supervisory authority, in particular the authority competent for the Operator's seat or for the user's habitual residence.
9. Obligation to Provide Data; Automated Decisions
1. A username and a password are required for registration; no further information is required.
2. Game results are determined automatically; suspensions for breaches are made following review by the Operator. No automated decision-making producing legal or similarly significant effects for the user within the meaning of Art. 22 GDPR takes place.
10. Changes to This Privacy Policy
The Operator will amend this Privacy Policy if the processing or the legal situation changes. The version published in the Shop at the relevant time applies.
Dok5-v1.1 · as of 2026-09-08