Privacy policy

jackpots.ch privacy policy

The protection of personal data is very important to Grand Casino Baden AG (hereinafter referred to as «GCB» or also referred to as «we» or «us»). For this reason, we make every effort to protect the privacy of all visitors to our websites.

Below, you will find all information on the processing of personal data that apply every time you visit or use «jackpots.ch» (hereinafter «the website») (hereinafter referred to as the «privacy policy»).

This privacy policy is a binding part of the General Terms and Conditions of Use of jackpots.ch (hereinafter the «GTC»). By using the gambling platform and by opening and logging into a player account, you accept this privacy policy. Please, therefore, read this privacy policy carefully.

Separate data protection provisions apply to the website www.grandcasinobaden.ch and all other services of GCB, which can be found at https://www.grandcasinobaden.ch/datenschutzerklaerung.

1 DATA PROTECTION WITH JACKPOTS.CH

Protecting your data and privacy is very important to us. In this privacy policy, we explain the nature, scope and purpose of the collection and other processing of personal data. Personal data is any information relating to an identified or identifiable natural person (Art. 5(a) Swiss Federal Act on Data Protection). Please note that our website may link to other websites for which different data protection rules may apply.

We process personal data in accordance with the provisions of Swiss law (Swiss Federal Act on Data Protection (FADP) and Swiss Ordinance on Data Protection (DPO)) and, where applicable, the European General Data Protection Regulation (GDPR). jackpots.ch was also the first Swiss casino to be ISO 27001 (international standard for information security) certified in 2019.

2 RESPONSIBILITY

2.1 REPRESENTATION FOR DATA PROTECTION MATTERS IN SWITZERLAND

The party responsible for processing personal data is:

Grand Casino Baden AG

Haselstrasse 2

5400 Baden, Switzerland

Tel. +41 (0)56 204 07 07

E-mail: [email protected]

If you have any concerns about data protection, you can send them to us for all Stadtcasino Baden Group companies at [email protected].

2.2 DATA PROTECTION SUPERVISORY AUTHORITIES

The responsible data protection supervisory authority in Switzerland is:

Eidgenössischer Datenschutz- und Öffentlichkeitsbeauftragter

Feldeggweg 1

3003 Bern

Tel. +41 (0)58 462 43 95

www.edoeb.admin.ch

3 LEGAL BASIS AND PURPOSE OF DATA PROCESSING

Casinos are subject to the following legal requirements, which also require the collection and processing of personal data:

• Federal Act on Gambling (BGS)
• Ordinance on Gambling (VGS)
• FDJP Ordinance on Casinos (SPBV-EJPD)
• Federal Act on Combating Money Laundering and Terrorist Financing (AMLA)
• FDJP Anti-Money Laundering Ordinance (GwV-EJPD)
• SFGB Anti-Money Laundering Ordinance (GwV-ESBK)

We use the personal data we collect primarily in connection with communication with you and to conclude and execute contracts with our customers and business partners. This applies in particular to our activities in connection with the operation of our online casino. This includes, for example, registering players, processing payments and organizing events. We thereby also fulfill our legal obligations, in particular to protect players from excessive gambling and to combat crime and money laundering, as well as our tax obligations. If your role includes working (e.g. as an employee or adviser) for one of our customers or business partners, your personal data may also be affected in this context.

In order to fulfill our legal obligations, we process the following data and may disclose it to the Swiss Federal Gaming Board (SFGB):

• Data collected from players during online registration
• Data about players’ gambling behavior and financial transactions
• Data about players’ personal, professional and financial situation
• Data about player suspensions

In addition, we process personal data from you and other persons, to the extent permitted and deemed appropriate, for the following purposes in which we (and sometimes third parties) have a legitimate interest corresponding to the purpose:

• Offering and further developing our offers, services and websites, apps and other platforms on which we have a presence, including improving the user experience and personalizing offers
• Communicating with third parties and processing their inquiries (e.g. supervisory authority)
• Reviewing and optimizing processes for needs analysis for the purpose of addressing customers directly and collecting personal data from publicly accessible sources for the purpose of customer acquisition
• Advertising and marketing (including organization of events and competitions) and maintaining relationships, provided that you have not objected to the use of your data (if we send you advertising, you can object at any time; we will put you on a list to stop further advertising)
• Market research, to improve our services and operations, for product development, training and quality assurance purposes
• Asserting legal claims and defense in connection with legal disputes and official proceedings
• Preventing and investigating criminal offenses and other misconduct (e.g. conducting internal investigations, data analysis to combat fraud)
• Ensuring and safeguarding our operations, in particular IT, our websites, apps and other platforms, as well as safeguarding our customers and employees

If you have given us consent to process your personal data for specific purposes (for example, when you subscribed to receive newsletters), we process your personal data within the scope of and on the basis of this permission unless we have any other legal basis and we require such a basis. Consent given can be withdrawn at any time, but this does not affect data processing that has already taken place.

4 COLLECTION OF PERSONAL DATA

4.1 DATA GATHERING

We primarily process personal data that we receive from our customers, business partners and other parties involved or that we collect from users when operating our website and other applications. This also includes contact details that you provide to us, e.g. via e-mail, the contact form or chat. This data will only be transmitted with your consent. You decide what data you want to enter into our web forms. If you provide your personal data, you also give us your consent for it to be processed by us.

For personalized services or access-protected areas, or for the processing of requests and administration of your player account, you may need to register and set up a user account. Certain personal data must be entered during registration. This includes your first and last name, gender, e-mail address, date of birth, address (full postal address, postcode, town/city), telephone number, username and password.

In addition to the information marked as mandatory, you can voluntarily enter and store additional personal data. This data is then stored in our system. We also store data in connection with the use of our offers and services, such as game histories and scores. jackpots.ch offers a Loyalty-Program that allows you to collect points during your activities on jackpots.ch, which can be exchanged for rewards from our Reward-Shop. Participation in the Loyalty-Program is automatic when you register on jackpots.ch (here you will find the terms and conditions of the Loyalty-Program and the Reward-Shop). Additional data may be required for the use of additional services and will be requested from you in this case. This applies, for example, to preferred communication channels and language preferences.

We are also entitled to request salary statements, proof of income/asset or tax documents from you in order to comply with legal obligations under gambling laws and regulations on combating money laundering and terrorist financing. In order to comply with legal requirements, we may also collect and/or update personal data from third parties (public registers, credit agencies, subcontractors).

We record all communication between players via the gambling platform, in particular via the chat function. Every contact with jackpots.ch customer support is also recorded.

If you post contributions (comments, photos, videos, etc.) using the appropriate features in order to share them with other people, we may publish them and thus make them available to the general public. This also applies to your username. Please refer to our GTCs, which you explicitly agree to by opening a player account. We would like to point out that once such data has been published on the internet, it may still be accessible from third parties, for example via search engines, even in the event of deletion or anonymization by you or us.

4.2 LOG FILES

All access to websites operated by GCB in connection with jackpots.ch is logged and stored in the log files of the web servers used. Only the information that your internet browser automatically transmits to the server is stored in the log files. This includes in particular:

• The user’s IP address
• The date and time of the server request
• The operating system of your device
• The user’s browser type/version
• The user’s language settings
• The name of your internet service provider
• The website from which you came to our site
• The pages accessed on our websites, and
• The transmission protocol used.

The transmitted data is stored in server log files for a period of up to four weeks. The data is stored to ensure that processes and procedures, particularly in connection with the use of our website and the security and stability of our system, are secure.

4.3 OPENING A PLAYER ACCOUNT

In order to create a player account, we need the following information:

• Title
• Gender
• First and last name
• Home address
• Date of birth
• Nationality
• E-mail address
• Mobile number
• Official ID
• Proof of residence
• Loss limit

This information is required in order to gain access to our online gambling services and to comply with our legal obligations.

4.4 GRANDWINNERS

In order to register for our GRANDWINNERS Loyalty-Program, we need the following information:

• Title
• First and last name
• Home address
• Date of birth
• Gender
• Nationality
• E-mail address
• Mobile number (optional)
• Official ID

Participation in our GRANDWINNERS program is expressly voluntary and with your consent.

4.5 COMMUNICATION

4.5.1 CONTACT FORMS

Our website contains contact forms that can be used to get in touch with us. The data entered in the contact forms is transmitted in encrypted form (SSL encryption).

If you use our contact form, your data from the form will be processed by us in order to process and respond to your inquiry and in the event of follow-up questions. We usually require the following information:

• First and last name
• E-mail address
• Subject
• Your inquiry

4.5.2 CONTACT BY E-MAIL

When you contact us by e-mail, we will store the data you provide (your e-mail address, if applicable your name, your telephone number and other information provided in the e-mail) in order to process your request or to answer your questions. Contacting us by e-mail is expressly voluntary and is carried out with your consent.

4.5.3 CONTACT BY LIVE CHAT

When you contact us by the live chat function, we will store the data you provide (your e-mail address, if applicable your name, your telephone number and other information provided in the chat message) in order to process your request or to answer your questions. Contacting us by the chat function is expressly voluntary and is carried out with your consent.

4.5.4 CHATBOT SERVICE ULTIMATE.AI

We use a chatbot from the service provider Ultimate.ai GmbH, Paul-Lincke-Ufer 39/40, 10999 Berlin, Germany («ultimate.ai») on our website to provide you with more efficient customer support. Ultimate.ai is a leading provider of AI-based chatbot solutions based in the European Union.

The chatbot allows you to ask questions and obtain information about our products and services without the need for human intervention. In this process, personal data such as name, contact information, and details of the inquiries may be processed for the purpose of responding to the inquiries.

Ultimate.ai processes all personal data in accordance with strict European data protection standards. No data is stored or processed outside the European Union. Ultimate.ai uses multi-level authentication processes and advanced encryption techniques for both data storage and transmission to ensure their security.

The use of the chatbot is voluntary. You decide which personal data you disclose about yourself in the context of the chat. If you choose not to use the chatbot, you can alternatively contact us via the aforementioned communication channels such as email.

For more information on data processing by Ultimate.ai, please refer to their privacy policy at https://www.ultimate.ai/security-privacy.

4.6 COOKIES

We use cookies and similar technologies on our website to identify your browser or device. Cookies are small text files that your internet browser stores on your computer or mobile device when you visit our website. If you visit the website again, we will be able to recognize you. In addition to temporary «session cookies», which are deleted after your website visit, «permanent cookies» can also be used to store user settings and other information for a certain period of time.

Cookies are used to optimize our website and our offers. Necessary (functional and technical) cookies ensure the use of features without which you will not be able to use the website as desired. An example of such cookies is the cookie used to log your consent to the use of cookies that require consent. The use of these cookies is based on our legitimate interest.

You can configure your preferences and consent via the cookie banner or in your browser settings and, for example, refuse to accept cookies from other companies or reject all cookies. Please note that you may not be able to fully use all the features of our websites if you reject cookies.

4.7 WEB ANALYTICS

4.7.1 GOOGLE ANALYTICS / FIREBASE

We use Google Analytics and Firebase, web analytics services provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland («Google»), to design, analyze and improve our website or our app in line with requirements.

Google Analytics and Firebase use cookies. Typically, the information generated by cookies about your use of websites is transmitted to a Google server in the US and stored there. However, as our website uses IP anonymization, your IP address will first be truncated by Google within member states of the European Union or in other signatory states to the European Economic Area Agreement. Only in exceptional cases will the full IP address be transmitted to a Google server in the US and then shortened there.

Google will use this information to analyze your use of GCB websites and applications for us, to compile reports on activities and to provide us with other services relating to your use of GCB websites and applications and of the internet. The IP address transmitted by your browser as part of Google Analytics or Firebase will not be merged with other data held by Google.

Further information on Google Analytics’ terms of use and data protection can be found at https://marketingplatform.google.com/about/analytics/terms/us/, https://firebase.google.com/support/privacy and https://policies.google.com/?hl=us&gl=de.

4.7.2 TWITTER ANALYTICS

Our website uses services provided by Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. The party responsible for data subject rights within the EU/EEA is Twitter International Company, Attn: Data Protection Officer, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland («Twitter»).

We use Twitter Analytics to measure the effectiveness of our online marketing efforts by gathering information about how many people clicked on our ads and were redirected to our website. This does not allow us to identify you. However, Twitter itself may store and process your personal data and create a link to a user profile. In particular, this allows Twitter and its partners to place advertisements on websites. Service provider: Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2 D02 AX07, Ireland; parent company: Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA; privacy policy: https://twitter.com/en/privacy.

4.7.3 HOTJAR

We use the web analytics service Hotjar to analyze the use of our website. Hotjar Ltd. (St Julian’s Business Centre, 3, Elia Zammit Street, St Julian’s STJ 1000, Malta) complies with the provisions of the Data Protection Act, Chapter 440 of the Laws of Malta, which implements all relevant European Union directives on data protection.

With Hotjar, for example, we can determine how long users stay on a page, which links they click, and how they navigate through the site. This helps us make our website more user-friendly. The information is collected anonymously and is not merged with other data.

Hotjar uses cookies and other technologies to collect information about the behavior of our users and their devices. This may include the device's IP address (stored only in anonymized form), screen size, device type, browser information, geographic location (country only), and preferred language.

Further information about the cookies used can be found at: https://www.hotjar.com/legal/policies/cookie-information.

For more information about Hotjar’s compliance with data protection, please see: https://www.hotjar.com/legal/policies/privacy/.

4.8 ADVERTISING AND MARKETING

4.8.1 GOOGLE MARKETING PLATFORM

The online marketing tool Google Marketing Platform («GMP») uses cookies to display ads that are relevant to website visitors, improve campaign performance reports or prevent an individual from seeing the same ads multiple times. Google uses a cookie ID to record which ads are displayed in which browser and can therefore prevent them from being displayed more than once. In addition, GMP can use cookie IDs to record «conversions», i.e. whether a person sees a GMP ad and later visits the advertiser’s website and makes a purchase there. According to Google, GMP cookies do not contain any personal information.

Your browser automatically establishes a direct connection to the Google server. We have no influence on the scope and further use of the data collected by Google through the use of this service. According to Google, the integration of GMP informs Google that visitors have accessed the relevant part of our website or clicked on one of our ads. If visitors are registered with a Google service, Google can assign the visit to the respective user account. Even if visitors are not registered with Google or are not logged in, it is possible that the provider will obtain and store the IP address. The use of GMP may also result in the transfer of personal data to Google servers in the USA.

You can prevent the tracking process by adjusting the appropriate settings of your browser software or by adjusting your settings for personalized advertising (https://myadcenter.google.com/personalizationoff?hl=en&sasb=true&ref=ad-settings).

Further information about the Google Marketing Platform can be found at https://marketingplatform.google.com/about/.

4.8.2 GOOGLE ADS

We use the Google Ads service on our website, an online advertising service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google Ads allows us to display advertisements in Google search results and the Google advertising network.Google Ads uses cookies. The information generated by the cookie about your use of the websites is transmitted to and stored on a server in the United States by Google.

For more information about the purpose and scope of data collection and its processing, as well as more information about your rights in this regard and setting options to protect your privacy, please contact: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland.

4.8.3 META BUSINESS TOOLS/CONVERSIONS API

Our websites use the Meta Conversions API. This API establishes a connection between our marketing data (such as website events, app events, business messaging events, and offline conversions) from the server, website platform, mobile app, or CRM, and Meta's systems that optimize targeting, reduce costs per result, and measure outcomes . You can find a detailed description of how the Conversions API works at: https://www.facebook.com/business/help/2041148702652965?id=818859032317965.

The service provider is the American company Meta Platforms Inc. The company Meta Platforms Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland) is responsible for the European area.

User data is collected in strict compliance with the Best Practices for Conversions API of the Meta Business Help Center (https://www.facebook.com/business/help/308855623839366?id=818859032317965), the best practices for privacy and data use for Meta Business Tools (https://facebook.com/business/help/363303621411154?id=818859032317965), the Meta Business Tool Terms (https://www.facebook.com/legal/terms/businesstools), the Data Processing Terms (https://www.facebook.com/legal/terms/dataprocessing) and the Cookie Consent Resource (https://developers.facebook.com/docs/app-events/cookies?locale=en_EN). Personal information such as websites visited, device information, IP addresses, e-mail addresses and telephone numbers may be collected.

The Meta Conversions API data interface enables us to better record the behavior of website visitors and forward it to Meta for evaluation. This allows us, for example, to optimize our ads on Facebook. When using the Meta Conversions API, we comply with the statutory provisions.

Meta also processes your data in the USA, among other places, which means that the site operator can pass on personal data to a company in a third country outside the EU via the Conversions API. The standard contractual clause makes data transfers to the USA temporarily compliant with data protection. These clauses are based on an implementing decision of the European Commission. You can find the resolution and the corresponding standard contractual clauses here: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=en.

Meta’s data processing conditions, which comply with the standard contractual clauses, can be found at https://www.facebook.com/legal/terms/dataprocessing.

You can find out more about the data processed through the use of the Meta Conversions API in Meta’s privacy policy (https://www.facebook.com/privacy/policy/).

4.8.4 FACEBOOK CUSTOM AUDIENCE (FACEBOOK PIXEL)

Our websites use the visitor action pixel from Facebook, Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland («Facebook») to track conversions.

This makes it possible to track the behavior of site visitors after they have been redirected to the provider’s website by clicking on a Facebook ad. This allows the effectiveness of Facebook ads to be evaluated for statistical and market research purposes and future advertising measures to be optimized. Facebook processes data from you, among other places, in the USA, which means that page operators can transfer personal data to a company in a third country outside the EU via the Facebook Custom Audience.

The data collected is anonymous for us as the operator of these websites; we cannot draw any conclusions about the identity of visitors. However, the data is stored and processed by Facebook, meaning that it is possible to make a connection to the respective user profile. Furthermore, Facebook can use the data for its own advertising purposes in accordance with the Facebook Data Policy. This enables Facebook to place advertisements on Facebook pages as well as outside of Facebook. This use of this data cannot be influenced by us as the site operator.

You can find more information on how to protect your privacy in the Facebook Privacy Policy (https://facebook.com/privacy/policy/?entry_point=data_policy_redirect&entry=0).

You can also deactivate the «Custom Audiences» remarketing feature in the ads Settings area (https://www.facebook.com/help/109378269482053/?helpref=hc_fnav). You need to be logged into Facebook to do this.

If you do not have a Facebook account, you can opt out of Facebook’s usage-based advertising on the European Interactive Digital Advertising Alliance website (https://www.youronlinechoices.com/ch-de/praferenzmanagement).

4.8.5 X ADVERTISING

By using X (formerly Twitter) and the «retweet» function, the websites you visit are linked to your X account and shared with other users. Data is also transmitted to X. We would like to point out that we, as the provider of the websites, have no knowledge of the content of the transmitted data or its use by X. More information about this can be found in Twitter’s privacy policy at http://twitter.com/privacy. You can change your X privacy settings in your account settings at http://twitter.com/account/settings.

X offers advertising services that use cookies or mobile device IDs or hash values (irreversibly encrypted numerical values) for e-mail addresses in order to recognize visitors to our website on the X services and to be able to offer advertising that is relevant to the interests and preferences of the individual. These options can be restricted or rejected in the settings of your X account. The data collected in this way will be deleted within six months. Data that makes it possible to identify a specific individual on X is deleted within 90 days. For more information on the storage period, contact X or visit https://legal.twitter.com/ads-terms/international.html.

Further information about X Ads can be found at https://business.twitter.com/en/help/ads-policies.html.

4.8.6 MICROSOFT ADS

On our website, we use Microsoft Advertising, an online advertising service provided by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA. With the help of this service, we can place targeted advertisements to promote our products and services.

Microsoft Advertising uses cookies and similar technologies to collect data about the use of our website and interaction with our ads. This data may include information such as IP address, browser type, visited pages, date and time of access, and response to advertisements.

The data collected by the cookies is used to measure the effectiveness of our advertisements, optimize our marketing strategies, and display targeted advertising based on user interests.

Further information about the nature, scope and purpose of data processing can be found in Microsoft’s Privacy Statement (https://privacy.microsoft.com/en-us/privacystatement). You can object to personalized advertising (https://account.microsoft.com/privacy/ad-settings/signedout?ru=https%3A%2F%2Faccount.microsoft.com%2Fprivacy%2Fad-settings).

4.8.7 TRADE DESK

Our website uses retargeting technology from The Trade Desk, Inc. 42. N. Chestnut Street Ventura, California 93001, USA («The Trade Desk»). This feature is used to present interest-based advertisements to visitors to the website as part of the The Trade Desk advertising network. Cookies are stored on the browser of the person visiting the website. On these websites, visitors can then be shown advertisements that relate to content that the person has previously viewed on websites that use The Trade Desk’s retargeting technology. According to its statements, The Trade Desk collects pseudonymized data during this process and no personal data is collected or stored.

You can object to the processing of the cookie data generated by The Trade Desk at any time at https://www.adsrvr.org/. Further information on The Trade Desk’s data protection can be found at https://www.thetradedesk.com/general/privacy-policy.

4.8.8 TRADEDOUBLER

We have integrated components of Tradedoubler into our website. The operating company of Tradedoubler is Tradedoubler GmbH, Herzog-Wilhelm-Strasse 26, 80331 Munich, Germany. Tradedoubler is a service for embedding advertisements in the form of text links, image links, advertising banners or input screens. Tradedoubler uses cookies that are stored on your computer as well as pixel tags that enable analysis of the use of the website. This allows us to analyze information such as visitor traffic on our website.

The information generated by cookies and pixel tags about the use of this website and the the display of advertising formats is transmitted to a Tradedoubler server and stored there. This information may be shared by Tradedoubler with Tradedoubler’s contractual partners. However, Tradedoubler will not merge your IP address with any other data stored about you.

You can object to the processing of data by Tradedoubler at https://publisher.tradedoubler.com/include/functions/optout.html. This places an opt-out cookie that prevents the future collection of your data when you visit this website. The opt-out cookie is stored on your device and is only valid in the browser in which you set it and only for our website. If you delete the cookies from your browser, you must set the opt-out cookie again.

You can find more information about how we use your data in Tradedoubler’s Privacy Policy (https://www.tradedoubler.com/de/privacy-policy/).

4.8.9 MY AFFILIATES

We use My Affiliates as an affiliate marketing platform on our website. My Affiliates allows us to partner with different publishers to promote our products and services and increase traffic to our website. By clicking on affiliate links on the publisher websites, personal data such as IP addresses and cookie information may be collected and transmitted to My Affiliates. This data is used to measure the effectiveness of our marketing campaigns and to reward us for successful transactions generated by affiliate links.

You can find more information about the use and processing of your data by My Affiliates in its Privacy Policy: https://www.myaffiliates.com/privacy-policy/.

4.9 WEBSITE OPTIMIZATION

4.9.1 GOOGLE TAG MANAGER

For the management of website tags through an interface, we use the Google Tag Manager, a service provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). The Google Tag Manager itself (which implements the tags) is a cookie-less domain and does not process any personal data. The service triggers other tags that may, in turn, collect data. Google Tag Manager does not access this data. If deactivation has been performed at the domain or cookie level, it will remain in effect for all tracking tags implemented with Google Tag Manager. By using Google Tag Manager, scripts (called tags) can be activated on our website automatically, and data may be transmitted from your browser to Google. This data may include information about your IP address, the browser you are using, the subpages of our website you have visited, and other interactions during your visit to the website. For more information about Google Tag Manager, see https://www.google.com/intl/de/tagmanager/use-policy.html.

4.9.2 KAMELEOON

Our website uses the testing and web analytics service Kameleoon provided by Kameleoon SAS, 12 Rue de la Chaussée d’Antin, 75009 Paris. This service allows us to analyze user behavior based on user segmentation. This enables us to evaluate the visiting behavior of individual user segments and carry out A/B tests in order to continuously improve our website. For the analyses, the browser’s local storage and cookies are used, which are linked to a pseudonymized ID.

Your IP address is fully anonymized and is not stored. The information generated by the cookie about your use of this website is transmitted to a Kameleoon server in Germany and stored there in aggregated and pseudonymized form. In some cases, Kameleoon may also store usernames when they are used on our website. The IP address transmitted by your browser as part of Kameleoon will not be merged with other data held by Kameleoon.

4.10 SOCIAL MEDIA

We offer recommendation buttons for the following social media on our website: Facebook, X (formerly Twitter), Instagram and YouTube. These allow you to recommend selected website content to other internet users via the relevant social media and add the content to your personal profile. The recommendation buttons are provided by the operators of the social media.

By integrating these plugins into our website, the operators of the relevant social media may receive the information that you have accessed our website. If you are logged in to one of the aforementioned social media during your visit to our website, the operator may assign this visit to your user account. If you do not want such information to be assigned to your profile, we recommend that you log out of social media before visiting our website.

If you use the buttons, the corresponding information is transmitted to the relevant social media and stored there. For more information on the purpose and scope of data collection, further processing and use of the data and settings options to protect your privacy, please refer to the privacy policy of the social media:

Facebook: http://facebook.com/policy.php

X: https://twitter.com/en/privacy

Instagram: https://help.instagram.com/155833707900388

YouTube: https://policies.google.com/privacy?hl=en-US

4.11 CUSTOMER REVIEWS AND FEEDBACK

TRUSTPILOT

Our website uses Trustpilot, a user feedback and review service provided by Trustpilot, Inc. (245 5th Avenue, 4th floor, New York, NY 10016, USA), or Trustpilot for short.

Trustpilot provides a form for submitting feedback about our website and reviewing your user experience and product quality. If you use this option, all information is entirely voluntary and the results are published on https://www.trustpilot.com/ under a pseudonym of your choice. Product reviews can also be published on our website or in Google search results. More information about Trustpilot’s data protection can be found at https://legal.trustpilot.com/end-user-privacy-terms.

4.12 Qualifio

jackpots.ch uses some services provided by Qualifio SA, Place de l’Université 25, 1348 Louvain-La-Neuve, Belgium (https://qualifio.com/), which must process, and in particular, collect, store, and use the personal data entered for the purpose of carrying out campaigns.

If you participate in a campaign with Qualifio, you may need to sign up with various information such as your e-mail or name. After you have successfully registered for the campaign, we will also use your data to personalize subsequent visits, e.g. to greet you with your name or to notify you of the results of the campaign by e-mail. Qualifio as a processor is also obliged to comply with the applicable data protection regulations (Art. 9 DPA).

By participating in any of these campaigns, you agree that your first name or username and your uploaded posts will be publicly disclosed on our websites. The consent may be withdrawn at any time.

jackpots.ch, as well as Grand Casino Baden, may use the data provided for market research and marketing purposes. People who consent to a one-off mailing may be contacted again by e-mail after the campaign. In addition, statistical analyses of all participants in the campaign are carried out in an anonymized form.

For the above-mentioned analyses, it may be necessary to summarize personal data that you provided to us, for example during registration, and continuously collected usage data in usage profiles. The summaries and their evaluations are exclusively internal and for the stated purposes.

5 DISCLOSURE OF DATA TO THIRD PARTIES

Insofar as we outsource certain parts of our data processing (e.g. to IT service providers, mailing services), we contractually oblige such contractor(s) to process the personal data only in accordance with the requirements of the applicable data protection law and to ensure that the rights of the data subject are protected. We also use (IT) services from our Swiss parent company Stadtcasino Baden AG. We use (IT) service providers from the EU as well as IT service providers from the US, with whom we conclude corresponding contracts and take technical and organizational measures to ensure an appropriate level of protection. Whenever possible, we select IT service providers with server locations in Switzerland or the EU (such as Zendesk).

If a recipient is located in a country without adequate statutory data protection, we contractually oblige the recipient to comply with the applicable data protection law (for this purpose, we use the revised standard contractual clauses of the European Commission), unless they are already subject to a legally recognized set of rules to ensure data protection and we cannot rely on an exempt provision. An exception may apply in particular to legal proceedings abroad as well as in cases of overriding public interest, or if the performance of a contract requires such disclosure, if you have consented, or if the data has been made generally available to the public by you and you have not objected to its processing.

Within the scope of fulfilling their legal mandate, the SFGB and other authorities may request access to our stored data.

We are required by law to make the identity of persons subject to a gaming ban available to other casinos in Switzerland. In addition, the date of issue, the type of suspension and the name of the casino that imposed the suspension will be disclosed. This obligation to provide information is fulfilled by storing the information in a central database to which all Swiss casinos have access.

We work with an addiction prevention center and a therapy facility in order to implement the social concept. During cooperation, personal data is exchanged on a case-by-case basis. If a gambling suspension is lifted, we are entitled to pass on the information about the player that is required to verify the lift to a cantonally recognized specialist or specialist authority.

If there are indications of money laundering, terrorist financing or funds of criminal origin or criminal organizations, we are authorized to forward all necessary data to the Swiss Money Laundering Reporting Office.

We disclose the personal data required to open your player account (see GTCs) to third parties in Switzerland and abroad, in particular in the event of suspected fraud, money laundering or other criminal conduct, for the purpose of clarifying the suspicion, initiating criminal, civil or administrative proceedings and complying with government orders during and outside pending proceedings, insofar as this is permitted under Swiss data protection law.

Personal data may also be disclosed to the specialist unit of SRO Casinos as part of investigations in connection with the prevention of money laundering and terrorist financing.

jackpots.ch maintains a data recording system in Switzerland for the gambling platform that records the above-mentioned player data and provides it to the supervisory authority.

6 RETENTION PERIOD FOR PERSONAL DATA

We process and store your personal data for the duration of the fulfillment of our contractual and legal obligations for as long as it is necessary to achieve the purposes for which the processing was carried out and for as long as we are legally obliged to store and document your personal data. We may retain personal data for as long as claims may be asserted against our company or for as long as we are otherwise required to do so by law or for as long as legitimate business interests require it. If your personal data is no longer required for the aforementioned purposes, it will be deleted or anonymized as part of our usual processes to the extent possible.

7 DATA SECURITY

To protect your personal data against unauthorized access and misuse, we take appropriate technical and organizational security measures, such as issuing directives, providing training, implementing IT and network security solutions, access monitoring and restrictions, encrypting data carriers and transmissions, and using pseudonymization or anonymization and controls.

8 RIGHTS OF DATA SUBJECTS

Within the scope of the data protection law that applies to you and to the extent provided for therein, you have the right of access, rectification and deletion and the right to otherwise object to our data processing and otherwise the right to object to our data processing, in particular data processing for direct marketing, profiling and other legitimate interests in processing, as well as the right to the disclosure of certain personal data for the purpose of transferring it to another body («data portability»). Please note, however, that we reserve the right to enforce the restrictions provided for by law, for example if we are obliged to store or process certain data, have an overriding interest in it (insofar as we may invoke it) or require it to assert claims. We will let you know in advance if you will incur any costs. We have already informed you about the option of withdrawing your consent in Section 3. Please note that the exercise of these rights may conflict with contractual agreements and this may lead to consequences such as early termination of the contract or cost implications. In this case, we will inform you in advance where this is not already contractually stipulated.

In order to exercise these rights, you generally need to prove your identity clearly (e.g. by means of a copy of your ID). To assert your rights, you can contact us at the address provided in Section 2.

In addition, every data subject has the right to assert their claims in court or to file a complaint with the competent data protection authority.

9 CHANGES TO THIS DATA PROTECTION INFORMATION

We reserve the right to amend this data protection information at any time in accordance with the applicable data protection regulations. Changes are published on our websites and come into effect when they are activated. The current version is valid as of April 2024.

If you have any questions about the processing or security of your personal data, you can directly contact the data protection officer in accordance with Section 2 above.