Online Swiss Casinos - Privacy Policy

Swiss Casinos Holding AG_DSE Anpassung betr. SST_OB

Table of Contents

Essential

Cloudflare (Content Delivery Network & Web Security)

reCAPTCHA (Bot Protection & Spam Prevention)

Microsoft Azure (Cloud Hosting & Infrastructure)

jsDelivr (Content Delivery Network & Script Libraries)

unpkg (Content Delivery Network & Script Libraries)

Google AJAX (Content Delivery Network & Script Libraries)

Zendesk (Customer Service & Support Communication)

Usercentrics Consent Management Platform

SWISS CASINO (Essential Platform Functions & Security)

FullStory (Technical Error Analysis & System Monitoring)

Dynamic Yield (Platform Rendering & Dynamic Delivery)

Google Tag Manager (incl. Server-Side Container)

EZPush (System & Push Notifications)

Lottie (Website Animations & UI Rendering)

Google Fonts (Web Fonts)

Analytics and Statistics

BigQuery

Google Analytics 4

Marketing

Google Ads (Advertising & Conversion Tracking)

Meta Pixel (Advertising, Retargeting & Conversion Tracking)

Adform (Programmatic Advertising, Targeting & Retargeting)

Adtraction (Affiliate Marketing & Performance Measurement)

The Trade Desk / adsrvr (Programmatic Advertising & Retargeting)

Google Conversion Linker (Conversion Tracking & Ad Attribution)

DoubleClick Ad / Google Marketing Platform (Adserving & Programmatic Advertising)

Microsoft Advertising (Search Engine Marketing & Conversion Tracking)

Outbrain (Content Recommendations & Native Advertising)

Snapchat & Snapchat Advertising (Social Media Tracking & Retargeting)

Teads (Video & Display Advertising)

Twitter / X Advertising (Social Media Tracking & Retargeting)

Essential

Cloudflare (Content Delivery Network & Web Security)

SWISS CASINO uses the services of Cloudflare on its website, provided by Cloudflare Inc., 101 Townsend St., San Francisco, CA 94107, USA ("Cloudflare").

Purpose & Processed Data:

Cloudflare acts as a Content Delivery Network (CDN) to improve website loading times via regionally distributed servers, reduce bandwidth usage, and protect our IT infrastructure against cyber-attacks (e.g., DDoS attacks or bot networks). All data traffic between your browser and our website is routed through Cloudflare's servers for this purpose. The purpose and processed data include:

To technically ensure these protection and delivery functions, Cloudflare processes the following data from you : IP address, system configuration information, the name of the visited website, date and time of the request, name and URL of the requested file, amount of data transferred, status information, referrer URL, requesting provider, device type, device operating system, and the exact time of the server request.

Technologies Used (Cookies):

To detect malicious bot traffic and ensure web security, Cloudflare strictly places technically necessary cookies in your browser (specifically __cf_bm and _cfuvid).

Data Transfer:

The data may be processed within the global Cloudflare Group. As a global CDN, data processing occurs in data centers within the European Union and across a worldwide server network (particularly in the USA). We have agreed with Cloudflare that data transfers to the USA are based on the Swiss-US Data Privacy Framework (DPF) or, should the DPF be declared invalid, on Standard Contractual Clauses (SCCs) alongside appropriate and proportionate technical and organizational measures. For transfers to other insecure third countries, SCCs and additional technical safeguards are implemented. By consenting to this privacy policy, you simultaneously agree that your personal data may be transferred to insecure third countries in accordance with Art. 17 of the Swiss Federal Act on Data Protection (FADP). Further information can be found in Cloudflare's privacy policy.

Legal Basis:

The use of Cloudflare is strictly necessary for the secure, fast, and error-free operation of our website (corresponding to Art. 6 Para. 1 lit. f GDPR). Data processing is therefore carried out without prior consent, based on the overriding private interest of SWISS CASINO (ensuring network and information security as well as website optimization) pursuant to Art. 31 Para. 1 FADP.

Retention Period:

Cloudflare retains the collected data only as long as necessary for the stated processing purposes (security and optimization); they are subsequently deleted. The security cookies used have a maximum lifespan of 30 minutes (__cf_bm) or expire at the end of the respective browser session (_cfuvid).

reCAPTCHA (Bot Protection & Spam Prevention)

SWISS CASINO uses the "reCAPTCHA" service on its website, provided by Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

Purpose & Processed Data:

The service is exclusively used to protect our website. It verifies whether data inputs (e.g., in contact forms or login processes) are made by a real human or abusively by automated programs (bots). To make this distinction, reCAPTCHA analyzes the website visitor's behavior based on various characteristics. As soon as the service is accessed, comprehensive telemetry and behavioral data are transmitted to Google. This includes: IP address, mouse movements, click path, time spent on the page, user behavior, user inputs, browser language, installed browser plugins, date and time of the visit, geographical location, and information on device type and operating system.

Technologies:

reCAPTCHA uses JavaScript scripts for analysis and may read device-specific information to train its analysis model and block spam.

Data Transfer:

Your personal data is processed by Google within the European Union and globally. According to the provider, data may be transferred to parent companies (Google LLC, Alphabet Inc.) and to third countries, specifically the USA, Singapore, Taiwan, and Chile. We have agreed with Google that transfers to the USA are based on the Swiss-US DPF or, if invalid, on SCCs alongside appropriate and proportionate technical and organizational measures. For transfers to other insecure third countries, SCCs are utilized. By consenting to this privacy policy, you also agree to the transfer of your personal data to insecure third countries under Art. 17 FADP. More details are available in Google's privacy policy.

Legal Basis:

The use of reCAPTCHA serves exclusively for fraud detection and defense against spam and bot attacks. The data processing is strictly necessary for providing secure web forms and is strictly separated from personalized advertising purposes. It is thus conducted without prior consent based on SWISS CASINO's overriding private interest (ensuring system integrity and IT security) under Art. 31 Para. 1 FADP.

Retention Period:

Google retains the data collected for behavioral analysis (along with any deployed reCAPTCHA cookies/local storage elements) in accordance with its own policies, only for as long as necessary for security verification and fraud detection purposes. The data is subsequently deleted or anonymized.

Microsoft Azure (Cloud Hosting & Infrastructure)

SWISS CASINO utilizes Microsoft Azure's cloud computing services for hosting, server infrastructure provision, and fundamental website functionality. The provider is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland.

Purpose & Processed Data:

Microsoft Azure provides the necessary server capacities and cloud environments so our website can be accessed and operated securely. Upon visiting our website, Microsoft servers automatically process technical connection data in the form of server log files. This strictly includes: your IP address, date and time of the server request, the user agent used (browser type and version, operating system), and the referrer URL (the previously visited website).

Technologies:

Data processing occurs server-side via log files. For this essential hosting function, no tracking cookies requiring consent are placed on your end device.

Data Transfer:

Your data is processed by Microsoft primarily in data centers within the European Union. A transfer of data to the parent company, Microsoft Corporation, in the USA cannot be ruled out within the global infrastructure. We have agreed with Microsoft that such transfers to the USA rely on the Swiss-US DPF or, if invalid, on SCCs and appropriate and proportionate technical and organizational measures. By consenting to this privacy policy, you agree that your personal data may be transferred to insecure third countries under Art. 17 FADP. Further details are in Microsoft's privacy policy.

Legal Basis:

The use of Microsoft Azure as a hosting provider is strictly necessary for the mere existence and delivery of our website. Data processing is carried out without prior consent based on our overriding private interest (ensuring the availability, delivery, and security of the website) under Art. 31 Para. 1 FADP.

Retention Period:

Technical data captured in server log files (e.g., IP addresses) is deleted or anonymized by Microsoft once it is no longer required for the stated processing purposes (specifically for maintaining operations and IT security).

jsDelivr (Content Delivery Network & Script Libraries)

SWISS CASINO uses the CDN jsDelivr for the fast, secure, and resource-efficient delivery of required scripts and open-source libraries. The provider is Prospect One sp. z o.o., Królewska 65A/1, 30-081 Kraków, Poland.

Purpose & Processed Data:

To reduce our website's loading times and ensure technically efficient, stable, and secure delivery, your browser loads necessary code files directly from jsDelivr's servers . jsDelivr processes purely technical server protocol data for this, specifically: your IP address, browser type and version, date and time of access, and the referrer URL.

Technologies:

Data processing is performed server-side upon file retrieval. No tracking cookies requiring consent are stored on your device for this service.

Data Transfer:

Prospect One sp. z o.o. is based in the European Union (Poland). However, because a CDN inherently relies on a worldwide network of edge servers to deliver files from the user's closest location, data processing (especially of the IP address) in third countries like the USA cannot be ruled out. Any data transfers to insecure third countries are based on adequacy decisions, SCCs, and appropriate and proportionate technical and organizational measures. More information is available in jsDelivr's privacy policy.

Legal Basis:

Integrating jsDelivr is technically strictly necessary for the error-free, secure, and high-performance provision of website functions. Data processing therefore occurs without prior consent based on our overriding private interest (ensuring functionality and optimizing loading times) under Art. 31 Para. 1 FADP.

Retention Period:

sDelivr processes technical connection data and server logs only as long as required for file delivery, network optimization, and diagnostic purposes. Afterwards, the data is deleted or aggregated.

unpkg (Content Delivery Network & Script Libraries)

SWISS CASINO uses the CDN unpkg for the fast, secure, and resource-efficient delivery of necessary script files and open-source packages. The provider is npm, Inc., 1999 Harrison Street, Suite 1150, Oakland, CA 94612, USA.

Purpose & Processed Data:

To shorten website loading times and ensure fundamental technical functionalities, your browser loads necessary code files directly from unpkg servers when you visit our page. To make this delivery technically possible and ensure system security, the provider must process technical connection data. This includes specifically: your IP address, browser type and version, operating system information, date and time of the request, the referrer URL, and possibly device-specific metadata. (Transparency Note: The provider's general privacy policy lists other purposes like "Marketing" or processing of "Account Data," but these refer to registered developers on the npm platform and do not apply to the mere delivery of scripts to our website visitors) .

Technologies:

The service may deploy technically necessary cookies or local storage technologies to ensure network security (e.g., bot detection or fraud prevention) and optimize file delivery. No cross-site user tracking takes place.

Data Transfer:

Data processing occurs on the provider's servers, primarily in the USA. Since unpkg is an openly accessible open-source network, data retrieval happens via direct browser request. If data is transferred to the USA, the operator states it relies on the Swiss-US DPF or, if invalid, on SCCs alongside appropriate and proportionate technical and organizational measures. By consenting to this privacy policy, you agree that your personal data may be transferred to insecure third countries under Art. 17 FADP. Further details are in npm's privacy policy.

Legal Basis:

The integration of unpkg is technically strictly necessary for the error-free, secure, and high-performance provision of website functions. Processing occurs without prior consent based on our overriding private interest (ensuring functionality, IT security, and loading time optimization) under Art. 31 Para. 1 FADP.

Retention Period:

Technical connection data and server logs are deleted or anonymized by npm, Inc. as soon as they are no longer needed for the stated purposes (specifically service provision and defense against security threats).

Google AJAX (Content Delivery Network & Script Libraries)

SWISS CASINO uses the "Google AJAX" CDN (also known as Google Hosted Libraries) for the fast and reliable delivery of essential open-source JavaScript libraries. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

Purpose & Processed Data:

The service provides a globally available high-speed network to load necessary code files directly into your browser. This significantly reduces loading times and ensures the fundamental functionality and design of our website. For this delivery to occur technically, Google must process technical data when establishing a connection. This includes: your IP address, browser information, your rough geographical location (derived from the IP address), and the referrer URL (referred to in the provider's information as "Visited Websites"; this exclusively means the subpage of our website from which the file was requested).

Technologies:

Data processing occurs server-side upon fetching JavaScript files. Google states that it does not place any tracking cookies requiring consent in your browser for pure CDN delivery via Google AJAX.

Data Transfer:

Since Google operates a worldwide server network, your data (especially the IP address) is transferred not only within the EU but also to parent companies (Google LLC, Alphabet Inc.) and to third countries like the USA, Taiwan, Singapore, and Chile. We have agreed with Google that transfers to the USA rely on the Swiss-US DPF or, if invalid, on SCCs and appropriate and proportionate technical and organizational measures. By consenting to this privacy policy, you agree that your personal data may be transferred to insecure third countries under Art. 17 FADP. Further details are in Google's privacy policy.

Legal Basis:

The integration of Google AJAX is technically strictly necessary for the high-performance and error-free provision of interactive website functions. Processing is thus carried out without prior consent based on our overriding private interest (ensuring functionality, stability, and loading time optimization) under Art. 31 Para. 1 FADP.

Retention Period:

The resulting technical connection data is deleted or anonymized by Google once it is no longer required for content delivery and network security maintenance.

Zendesk (Customer Service & Support Communication)

SWISS CASINO uses Zendesk to handle user inquiries, customer relationship management, and provide support functions (e.g., live chat or contact forms). The provider is Zendesk Inc., 989 Market Street #300, San Francisco, CA 94102, USA.

Purpose & Processed Data:

The service allows you to quickly and easily contact our support team. When using these support channels, we process the data you voluntarily provide (e.g., first name, last name, email address, physical address, and the content of your inquiry). To technically provide the service, troubleshoot, and prevent abuse, Zendesk also automatically collects technical data, specifically your IP address, when the support function is accessed.

Technologies (Cookies & Local Storage):

To ensure the support widget's functionality, Zendesk places strictly necessary cookies and local storage technologies (HTML Local Storage / Session Storage) in your browser (e.g., ZD-suid, ZD-buid, zendeskInitialized). These serve exclusively to maintain the chat session and conversation history while you navigate our various subpages. No cross-site tracking for marketing purposes takes place.

Data Transfer:

Your data is primarily processed in the European Union and on servers in the USA. We have agreed with Zendesk Inc. that data transfers to the USA are based on the Swiss-US DPF. Additionally, SCCs approved by the EU Commission are utilized. More information is available in Zendesk's privacy policy.

Legal Basis:

Providing a functioning, cross-session customer service tool is essential to our business operations. Data processing thus occurs without prior consent based on our overriding private interest (efficient and user-friendly handling of customer inquiries) under Art. 31 Para. 1 FADP. If your contact inquiry aims at concluding or fulfilling a contract, the additional legal basis is the initiation or performance of a contract (Art. 31 Para. 2 lit. a FADP).

Retention Period:

Session storages are deleted when the browser is closed, while functional local storage entries remain on your device to resume support sessions upon return, unless manually deleted in your browser. The content of your support inquiries is kept in our system only as long as necessary to process your request and fulfill statutory retention obligations.

Usercentrics Consent Management Platform

SWISS CASINO uses Usercentrics to obtain, manage, and document user consents on the website. The provider is Usercentrics GmbH, Sendlinger Str. 7, 80331 Munich, Germany.

Purpose & Processed Data:

The service exists exclusively to provide users with a legally compliant consent management system (cookie banner). Via Usercentrics, users can decide which optional services to permit or reject. To log and technically implement these decisions, Usercentrics processes: your IP address, opt-in and opt-out data, an anonymized Consent ID, the exact time of consent, the consent type used, device information (User Agent, screen resolution), banner language, geographical location, and the referrer URL.

Integration into Tracking Architecture (Server-Side GTM): Consent signals captured via Usercentrics are integrated into SWISS CASINO's tracking architecture and serve as the basis for controlling downstream data flows according to the selection made. In this context, tracking signals are initially processed via our server-side infrastructure (specifically via the Google Tag Manager Server Container). Depending on the consent status, data processing is activated, restricted, or blocked. This allows data to be technically reduced before being forwarded to connected analytics and marketing services (e.g., by filtering specific parameters).

Technologies (Local Storage):

To prevent the cookie banner from reappearing on every page load, Usercentrics strictly locally stores your privacy settings in your browser (using local storage elements like ucString and ucData). No cross-site tracking of your behavior occurs.

Data Transfer:

Processing of consent data primarily occurs on servers within the European Union. In exceptional cases where a transfer to insecure third countries occurs (e.g., IT support by the provider), Usercentrics relies on EU Commission SCCs. Further details are in Usercentrics's privacy policy.

Legal Basis:

The use of the Consent Management Platform is technically and legally strictly necessary to fulfill data protection accountability obligations. Processing therefore occurs without prior consent based on our overriding private interest (legally compliant and secure website operation) and to fulfill legal obligations under Art. 31 Para. 1 FADP.

Retention Period:

Your recorded consent data (both granted consents and withdrawals) and the associated Consent ID are retained for one year for accountability purposes and are subsequently deleted without delay.

SWISS CASINO (Essential Platform Functions & Security)

SWISS CASINO uses its own (First-Party) storage technologies on the website to ensure fundamental technical functionality, system security, and a smooth user experience. These essential technologies are strictly necessary to provide basic website functions. This includes active user session management, storing your preferred settings (language and privacy), and unique device identification for fraud prevention and security (especially in the regulated casino environment).

Technologies (Cookies & Local Storage):

To ensure these core functions, the following specific First-Party technologies are set in your browser. No cross-site tracking for marketing purposes takes place:

• hub2_device_uuid, #.#.clientId (Local / Session Storage): Used for unique device allocation, secure connection control, and fraud prevention.
• user / userModel (Session Storage): Used to manage the active user session and login status during your visit.
• userLang, cookieSettings (Local Storage): Store strictly necessary user preferences (selected language and consent status).
• lastExternalReferrer, lastExternalReferrerTime (Local Storage): Technical recording of the referring site for IT security, correct session routing, and fraud prevention purposes (e.g., affiliate fraud).

(Note: Security and support cookies from third-party providers like Cloudflare or Zendesk are explicitly detailed in their respective sections of this policy).

Data Transfer:

First-Party data (like language settings and session status) is processed exclusively on SWISS CASINO's infrastructure. No transfer to third countries occurs through these specific First-Party technologies.

Legal Basis:

The use of these essential First-Party technologies is technically strictly necessary for the secure provision of the casino platform and your requested website functions. Data processing occurs without prior consent based on our overriding private interest (ensuring IT security, fraud prevention, and platform usability) under Art. 31 Para. 1 FADP.

Retention Period:

The deployed session storages (user, userModel, #.#.clientId) are automatically deleted when you close your browser. Functional local storage entries remain on your device until their respective purpose is fulfilled or you manually delete them via your browser settings.

FullStory (Technical Error Analysis & System Monitoring)

SWISS CASINO uses FullStory, provided by FullStory, Inc., 1745 Peachtree St NW, Suite G, Atlanta, GA 30309, USA.

Purpose & Processed Data:

The service is strictly used for technical monitoring, identifying critical system errors (bug tracking), and resolving malfunctions on the casino platform. For this, FullStory captures pseudonymized interaction data (like click paths, mouse movements, and scroll behavior) and technical metadata (IP address, device type, browser version, loading times). To protect your privacy, the system is strictly configured to mask sensitive input fields (like passwords, payment data, or personal form entries) client-side, ensuring they never reach our servers unencrypted. No analysis for marketing purposes or the creation of advertising profiles occurs.

Technologies:

FullStory uses technically necessary First-Party cookies and local storage elements (like fs_uid) to link individual page views during an active session into a coherent error log.

Data Transfer:

As FullStory is a US-based provider, the collected technical diagnostic data is transmitted to the USA. We have agreed with FullStory that the data transfer relies on the Swiss-US DPF or, if invalid, on SCCs alongside appropriate and proportionate technical and organizational measures. By consenting to this privacy policy, you agree that your personal data may be transferred to insecure third countries under Art. 17 FADP. More details are in FullStory's privacy policy.

Legal Basis:

Using FullStory in this configuration is strictly necessary to guarantee technical stability, proactive troubleshooting, and platform security. Processing therefore occurs without prior cookie consent, based on our overriding private interest (ensuring system integrity and IT security) under Art. 31 Para. 1 FADP.

Retention Period:

The technical cookies set generally have a lifespan of up to one year to assign recurring technical errors. Recorded sessions and error logs are automatically and irreversibly deleted from FullStory's servers after a defined period (usually 30 to a maximum of 90 days).

Dynamic Yield (Platform Rendering & Dynamic Delivery)

SWISS CASINO uses "Dynamic Yield," an experience optimization platform, for the dynamic delivery and presentation of our web content. The provider is Dynamic Yield Ltd. (a Mastercard company), 8 Hakirya Street, Tel Aviv 6818023, Israel.

Purpose & Processed Data:

This service is essential for the technical delivery and correct rendering of our user interface. Dynamic Yield is used to guarantee platform stability, load layouts flawlessly in real-time, and conduct basic technical A/B tests to ensure system functionality. To fulfill these technical purposes, the system automatically processes access data such as your IP address (anonymized), browser type used, operating system, timestamp of the request, and general interactions with the user interface to control the correct delivery of the website architecture.

Technologies:

To guarantee consistent website display throughout your session, Dynamic Yield strictly stores necessary technical information (like session IDs) in your browser (e.g., via local storage or technically necessary cookies). Since this service is technically indispensable for providing core website functions, it cannot be deactivated via the consent management system.

Data Transfer:

Your data processing by Dynamic Yield Ltd. occurs, among other places, in Israel. Both Switzerland and the European Commission have issued a formal adequacy decision for Israel. This certifies that the country has a level of data protection equivalent to that of Switzerland and the EU. No transfer to legally insecure third countries under Art. 17 FADP takes place via this service. Further information is in DY's privacy policy.

Legal Basis:

The use of Dynamic Yield for the dynamic delivery of our core architecture is technically strictly necessary to provide you with our platform securely and without errors. Processing is thus based on our overriding legitimate interest under Art. 31 Para. 1 FADP.

Retention Period:

The technical IDs strictly necessary for page delivery (like session cookies) are generally deleted automatically when you close your browser. Server-side protocol data used to ensure system stability is routinely overwritten or anonymized according to the provider's internal policies once no longer required for technical operations.

Google Tag Manager (incl. Server-Side Container)

SWISS CASINO uses Google Tag Manager, provided by Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland, to manage and deploy website scripts and tracking tools. The Google Tag Manager is purely an auxiliary and administrative tool. It does not set its own tracking cookies, creates no user profiles, and stores no independent analytics data. It functions solely as a central control logic that triggers other tags (e.g., Google Analytics or Meta Pixel) according to predefined rules.

Connection with Consent Management (Usercentrics):

The Tag Manager is technically strictly linked with our consent management system (Usercentrics). It ensures that third-party scripts requiring consent are only triggered if you have explicitly granted your prior consent or if the "Advanced Consent Mode" (cookieless pings) applies.

Use of a Server-Side Container:

To further protect your privacy, we route data streams via a so-called server-side Tag Manager Container (Server-Side Tracking). This means data points are not sent directly from your browser to third-party providers, but are first directed to a server-side infrastructure under our control. The server-side container can be configured as a technical filtering and control layer to reduce data (e.g., by removing or truncating the IP address) before it is forwarded to the respective end services. To purely establish the technical connection and deliver the GTM configuration to your browser, your IP address must briefly be processed by Google. Wherever technically possible and sensible, we configure the server-side container to minimize direct data transfers to third-party providers.

Purpose:

Central, secure, and performant management of website services, implementation of consent requirements (opt-in/opt-out), and server-side filtering of data streams to protect user privacy.

Data Transfer:

Connection data necessary for script delivery (specifically the IP address) is fundamentally processed by Google in Ireland. A potential transfer to the USA to the parent company Google LLC relies on the Swiss-US DPF or, if invalid, on SCCs and appropriate and proportionate technical and organizational measures. By consenting to this privacy policy, you agree that your personal data may be transferred to insecure third countries under Art. 17 FADP. More information is in Google's privacy policy.

Legal Basis:

The use of Google Tag Manager is based on SWISS CASINO's overriding private interest (technically secure, error-free, data-minimizing, and resource-efficient website operation, as well as legally compliant implementation of consent preferences) under Art. 31 Para. 1 FADP. Once you have consented to this privacy policy, we also process your personal data based on your explicit consent under Art. 31 Para. 1 FADP.

Retention Period:

The IP address processed for establishing the connection is generally deleted or anonymized by Google in its server logs according to its policies, typically within a maximum of 14 days.

EZPush (System & Push Notifications)

Purpose & Processed Data: As part of the casino platform's core technical infrastructure, SWISS CASINO uses the EZPush service to deliver essential system notifications and real-time updates. The service sends technically necessary system messages, status updates, and notifications in real-time directly to your browser or device. In the highly regulated casino environment, this is strictly required to promptly deliver mandatory playing time reminders (Reality Checks), security warnings, connection drops, or important transaction status alerts. Only technical data is processed for this, specifically: your IP address, a unique device ID (device token or push token), and technical connection data.

Technologies:

EZPush employs server-side connections and local storage technologies (tokens) to ensure the secure and targeted delivery of system messages to the exact correct device. No cross-site tracking for marketing purposes takes place.

Data Transfer:

Data processing by this service occurs on servers and data centers within the European Union or Switzerland. No transfer to insecure third countries occurs within the scope of these essential system notifications.

Legal Basis:

Utilizing EZPush for system-relevant notifications is technically strictly necessary for the secure, error-free, and regulation-compliant operation of the casino platform. Data processing occurs without prior consent based on our overriding private interest (ensuring IT security, fulfilling regulatory requirements such as player protection, and secure platform usage) under Art. 31 Para. 1 FADP.

Retention Period:

The device tokens and connection data generated for message delivery are only kept in our system for as long as your device is authorized and registered to receive essential notifications, and are subsequently deleted.

Lottie (Website Animations & UI Rendering)

Purpose & Processed Data:

SWISS CASINO uses the script library "Lottie" on the website to integrate high-resolution and resource-efficient animations into the user interface. The service is exclusively used for the visual and interactive enhancement of the website (e.g., displaying loading animations or visual feedback during user actions). When your browser loads the animation files and the corresponding player, purely technical connection data is processed, particularly your IP address and basic browser information.

Technologies:

Lottie utilizes JavaScript to render animations (in JSON format) locally in your browser. For this purely functional process, no tracking cookies requiring consent are placed on your device, no cross-device identifiers are read, and no user profiles are created.

Data Transfer:

Because the service, according to our system configuration, is provisioned locally or via a European infrastructure, no data transfer to insecure third countries takes place during script delivery.

Legal Basis:

An appealing, responsive, and modern user interface presentation is a core component of our website functionality. The brief processing of connection data to retrieve the scripts thus occurs without prior consent, based on our overriding private interest (ensuring functionality, usability, and error-free UI rendering) under Art. 31 Para. 1 FADP.

Retention Period:

Any server logs and connection data (like the IP address) generated during script retrieval are immediately discarded or deleted server-side after the file is delivered. Personal user data is not stored by this service.

Google Fonts (Web Fonts)

SWISS CASINO uses "Google Fonts," a service for the provision and uniform presentation of fonts. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

Purpose & Processed Data:

The service is used to display texts and typographic elements on our website in an appealing, fast, and visually consistent manner across different devices and browsers. Once you consent to load the fonts, your browser establishes a direct connection to Google's servers to download the required font files (Web Fonts). For technical reasons, your IP address is transmitted to Google during this process. Google may also process from which website (referrer URL) the request originated, and collect technical details about your browser and device.

Technologies:

Integration occurs via a server-side call of the fonts by your browser. According to Google, no tracking cookies are set in your browser for the mere delivery of Google Fonts.

Data Transfer: Through the dynamic retrieval of fonts, technical connection data (specifically your IP address) is transmitted to Google's server network. This also involves a data transfer to the parent company Google LLC in the USA. We have agreed with Google that transfers to the USA rely on the Swiss-US DPF or, if invalid, on SCCs and appropriate and proportionate technical and organizational measures. By consenting to this privacy policy, you agree that your personal data may be transferred to insecure third countries under Art. 17 FADP. Further information is in Google's privacy policy.

Legal Basis:

The dynamic retrieval of Google Fonts and the associated transmission of your IP address strictly relies on your explicit consent under Art. 31 Para. 1 FADP (analogous to Art. 6 Para. 1 lit. a GDPR). You can revoke this consent at any time with future effect via our cookie settings (Usercentrics).

Retention Period:

According to Google, the IP address and technical connection data are only processed briefly to deliver the font files to your browser and are generally not linked to your personal Google account or permanently stored for profiling purposes.

Analytics and Statistics

BigQuery

SWISS CASINO uses BigQuery on its website, an analytics and database service integrated into the Google Cloud Platform, provided by Google Ireland Limited ("Google"), headquartered at Gordon House, Barrow Street, Dublin 4, Ireland.

Purpose & Processed Data:

Data is stored, structured, consolidated, and statistically evaluated within BigQuery for analysis and reporting purposes. In this context, data from connected sources (such as Google Analytics 4, Meta Pixel, Microsoft Advertising) are consolidated into BigQuery and processed in the form of queries, aggregations, and reports. The integration of BigQuery occurs server-side via a Google Tag Manager Server Container, depending on consent and configuration. Consent is collected via Usercentrics and factored into the data processing. Within the server container, tracking data is technically minimized (e.g., via IP masking and filtering identifiers in the absence of consent) before being transmitted to Google. You will find more detailed information in the corresponding section. Depending on the configuration, and particularly based on your consent status, data is processed in different ways. Whether specific signals are recorded or evaluated in BigQuery, as well as the scope of this logging, depends on the respective technical configuration:

• • If you grant your consent (Opt-in): Pseudonymized personal data or personal online identifiers are processed and stored to enable a detailed evaluation. These include, in particular:
    • Pseudonymous identifiers (e.g., Cookie ID, Client ID, Session ID, Consent ID).
    • Click path and conversions.
    • Timestamps.
    • Device and browser information.
    • Truncated IP address (the last octet is removed server-side).
    • Approximate location data (derived from the truncated IP address).
  • If you refuse your consent (Opt-out / Advanced Consent Mode): If you object to tracking, no analytics or advertising cookies are placed on your end device, and no unique user identifiers (such as the Client ID) are read or transmitted to BigQuery. Depending on the technical configuration, aggregated signals or signals that do not permit direct identification may still be processed. These may include, in particular:
    • Your consent status (Consent = denied).
    • Basic metadata (such as general device type, timestamp, country).
    • Truncated IP address (the last octet is removed server-side).
  • These signals serve the purpose of aggregated reach modeling and the technical implementation of the consent status. In the event of a refusal of consent on your part, we do not perform any personal analysis or cross-referencing with other data for the purpose of creating individual user profiles.

Purpose of Processing:

Data processing with BigQuery is carried out for the following purposes:

• • Audience measurement and statistical evaluation of website utilization.
  • Optimization of content, user experience, functionalities, and performance.
  • Performance measurement of campaigns and marketing activities (e.g., conversion analysis).
  • Error analysis and security.

Data Transfer:

In principle, your personal data is processed by Google in Ireland. The transfer of European or Swiss personal data to Google may result in the transmission of this data to its US parent company, Google LLC, in the United States, or to third parties in a country that does not guarantee an equivalent level of data protection. We have agreed with Google that transfers to the United States are based on the Swiss-US Data Privacy Framework (DPF) or on Standard Contractual Clauses (SCCs), accompanied by appropriate and proportionate technical and organizational measures. By consenting to this privacy policy, you also agree that your personal data may be transferred to insecure third countries in accordance with Art. 17 FADP. Further information can be found in Google's privacy policy.

Legal Basis:

In Opt-in mode, data processing is carried out based on your explicit consent in accordance with Art. 31 Para. 1 FADP. In Opt-out / Advanced Consent Mode, we base data processing on our overriding private interest in accordance with Art. 31 Para. 1 FADP. Once you have consented to this privacy policy, we also process your personal data based on your explicit consent in accordance with Art. 31 Para. 1 FADP.

Retention Period:

Your personal data and pseudonymized analysis data are retained only as long as necessary for the aforementioned purposes. The retention period for pseudonymized tracking data in BigQuery is generally 26 months. Upon expiration of this period, all personally identifiable and pseudonymous identifiers are irrevocably deleted. The remaining, fully anonymized and aggregated data is no longer subject to data protection law and may be retained for an indefinite period for purely statistical purposes and long-term evaluations.

International Transfer Status:

You must check the "This Service is sharing data outside of the EU / EEA (International Transfer)" option for this service.

Google Analytics 4

SWISS CASINO uses Google Analytics 4 on its website, a web analytics service provided by Google Ireland Limited ("Google"), headquartered at Gordon House, Barrow Street, Dublin 4, Ireland.

Purpose & Processed Data:

Cookies are used to create pseudonymized user profiles. The data is then stored on the end device, pseudonymized, and evaluated in the form of statistics. The integration of Google Analytics 4 occurs server-side via a Google Tag Manager Server Container, depending on consent and configuration. Consent is collected via Usercentrics and factored into the data processing. Within the server container, tracking data is technically minimized (e.g., via IP masking and filtering identifiers in the absence of consent) before being transmitted to Google. You will find more detailed information regarding server-side filtering in the section above. Depending on the configuration, and particularly based on your consent status (utilization of "Advanced Consent Mode"), data is processed in different ways:

• • If you grant your consent (Opt-in): Permanent cookies from Google Analytics 4 are used (specifically _ga and _ga_*), which are automatically deleted after a defined duration. In this context, the following data concerning you is processed:
    • Masked IP address of the requesting computer.
    • Date and time of access.
    • Website from which access is made (referrer URL).
    • Browser type and version.
    • Number of visits/users.
    • Session statistics.
    • Extension of demographic characteristics and interests (if activated): age (18-65+), gender, common interest categories, in-market audience segments (readiness to purchase).
  • If you refuse your consent (Opt-out / Advanced Consent Mode): SWISS CASINO utilizes "Advanced Consent Mode". If you object to tracking, no analytics cookies are placed on your end device, and no unique user identifiers (such as the Client ID) are read. Depending on the technical configuration, certain technical signals may nevertheless continue to be processed. These may constitute personal data within the meaning of the Swiss Federal Act on Data Protection. Such signals may include, in particular:
    • Your consent status (Consent = denied).
    • Basic metadata (such as general device type, timestamp, country).
    • Truncated IP address (the last octet is removed server-side).
  • These signals serve the purpose of aggregated reach modeling and the technical implementation of the consent status. In the event of a refusal of consent on your part, we do not perform any personal analysis or cross-referencing with other data for the purpose of creating individual user profiles.

Purpose of Processing:

Data processing with Google Analytics 4 serves the purpose of error analysis, audience measurement, and the continuous improvement of the website offering by means of statistical evaluations.

Data Transfer:

In principle, your personal data is processed by Google in Ireland. The transfer of European or Swiss personal data to Google may result in the transmission of this data to its US parent company, Google LLC, in the United States, or to third parties in a country that does not guarantee an equivalent level of data protection. We have agreed with Google that transfers to the United States are based on the Swiss-US Data Privacy Framework (DPF) or, should the DPF be declared invalid, on Standard Contractual Clauses (SCCs), accompanied by appropriate and proportionate technical and organizational measures. By consenting to this privacy policy, you also agree that your personal data may be transferred to insecure third countries in accordance with Art. 17 FADP. Further information on how Google processes your data can be found in Google's privacy policy.

Legal Basis:

In Opt-in mode, data processing is carried out based on your explicit consent in accordance with Art. 31 Para. 1 FADP. In Opt-out / Advanced Consent Mode, we base data processing on our overriding private interest in accordance with Art. 31 Para. 1 FADP. Once you have consented to this privacy policy, we also process your personal data based on your explicit consent in accordance with Art. 31 Para. 1 FADP.

Retention Period:

Your data associated with the user or event level (pseudonymous identifiers) is retained in Google Analytics 4 for a maximum duration of 14 months before being automatically deleted. Aggregated statistical reports, which no longer allow conclusions to be drawn about individual users, are not subject to this deletion period.

International Transfer Status:

You must check the "This Service is sharing data outside of the EU / EEA (International Transfer)" option for this service.

Marketing

Google Ads (Advertising & Conversion Tracking)

SWISS CASINO uses Google Ads on its website, an advertising and tracking service for delivering targeted campaigns and measuring success (conversion tracking). The service provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

Purpose & Processed Data:

The service is used to display personalized or non-personalized advertising to users and to measure the success of these advertising measures. If you click on one of our ads on Google, it tracks whether you subsequently perform a desired action on our website (e.g., a registration). Once you consent to the tracking, Google collects extensive interaction and user data for this purpose. This includes: IP address, cookie IDs, online identifiers, interaction data (such as viewed advertisements and clicks), search terms, device and browser information, referrer URL, date and time of the visit, and the rough geographical location derived from the IP address.

Integration into the Tracking Architecture:

Google Ads is strictly integrated into our Consent Management System (Usercentrics). This means that tracking scripts for advertising measurement are only fully activated and create personal profiles if you have given your explicit consent (opt-in).

Technologies (Cookies & Local Storage):

Provided you have consented, Google sets specific tracking technologies in your browser for recognition and conversion measurement. These include, in particular, so-called conversion linker tags, which enable the assignment of clicks on ads to actions on our website. Used technologies include _gcl_au, FPAU, and _gtmeec (Cookies) which serve the cross-domain storage of ad click information and the assignment of conversions (Validity: 90 days). Additionally, _gcl_ls (Local Storage) serves as persistent local storage to support conversion tracking.

Data Transfer:

The collected data is transferred by Google to servers of the parent companies (Google LLC, Alphabet Inc.) and to a worldwide server network. According to the provider, data processing takes place in particular in the USA, Chile, Singapore, and Taiwan. We have agreed with Google that the data transfer to the USA is based on the Swiss-US Data Privacy Framework (DPF) or, should the Data Privacy Framework be declared invalid, based on Standard Contractual Clauses as well as appropriate and proportionate technical and organizational measures. By consenting to this privacy policy, you also consent to your personal data being transferred to insecure third countries in accordance with Art. 17 FADP. Further information can be found in Google's privacy policy.

Legal Basis:

The use of Google Ads and the associated storage of cookies or the reading of information on your end device takes place exclusively based on your explicit consent in accordance with Art. 31 Para. 1 FADP (analogous to Art. 6 Para. 1 lit. a GDPR). You can revoke this consent at any time via our cookie settings (Usercentrics) with effect for the future.

Retention Period:

The cookies set on your end device have a maximum lifespan of 90 days. On Google's servers, the recorded advertising log data is automatically anonymized after 9 months, and information linked to cookies is anonymized after 18 months.

International Transfer Status:

You must check the "This Service is sharing data outside of the EU / EEA (International Transfer)" option for this service.

Meta Pixel (Advertising, Retargeting & Conversion Tracking)

SWISS CASINO uses the "Meta Pixel" on its website, a tracking technology for delivering targeted campaigns (retargeting) and measuring success (conversion tracking). The service provider for users in Europe is Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

Purpose & Processed Data:

The service is used to analyze user behavior (so-called "events") on our website after you have clicked on an ad placed on Facebook, Instagram, or other services provided by Meta. This enables us to display personalized advertising and measure the effectiveness of our advertising campaigns. Once you consent to the tracking, the Meta Pixel collects extensive interaction and system data. This includes: your IP address, Facebook user ID, device ID, Pixel ID, viewed content and web pages, clicked elements, search terms, HTTP header information, referrer URL, browser and device information (including operating system), as well as the geographical location derived from the IP address. If you have a Facebook or Instagram account and are logged in, Meta can assign this data directly to your personal profile.

Integration into the Tracking Architecture:

The Meta Pixel is strictly integrated into our Consent Management System (Usercentrics). Tracking is only activated and forwarded to Meta servers if you have given your explicit consent (opt-in) for the "Marketing" category. Without this consent, the Meta Pixel remains blocked on our website.

Technologies (Cookies & Pixels):

Meta sets specific tracking technologies (tracking pixels and cookies) in your browser to recognize users and assign clicks and conversions across devices. The _fbp cookie is used to store and track visits across different websites to provide personalized advertising (Validity: 90 days). The _gtmeec cookie serves to technically support server-side tracking and conversion attribution (Validity: 90 days).

Data Transfer:

The collected data is generally transferred to and stored on servers of Meta Platforms Inc. According to the provider, global data processing takes place, particularly in the USA, Singapore, and the United Kingdom (UK). We have agreed with Meta that data transfer to the USA is based on the Swiss-US Data Privacy Framework (DPF) or, should the Data Privacy Framework be declared invalid, based on Standard Contractual Clauses as well as appropriate and proportionate technical and organizational measures. By consenting to this privacy policy, you also consent to your personal data being transferred to insecure third countries in accordance with Art. 17 FADP. Further information can be found in Meta's privacy policy.

Legal Basis:

The use of the Meta Pixel and the associated storage of cookies, as well as the reading of user data, takes place exclusively based on your explicit consent in accordance with Art. 31 Para. 1 FADP. You can revoke this consent at any time via our cookie settings (Usercentrics) with effect for the future.

Retention Period:

The Meta cookies (_fbp, _gtmeec) set on your end device have a defined lifespan of 90 days. According to the provider, user interactions and event data recorded on Meta servers are stored for a maximum of two years and are subsequently deleted or anonymized once they are no longer required for processing purposes.

International Transfer Status:

You must check the "This Service is sharing data outside of the EU / EEA (International Transfer)" option for this service.

Adform (Programmatic Advertising, Targeting & Retargeting)

SWISS CASINO uses the digital advertising platform Adform on its website for delivering targeted campaigns, automated purchasing of advertising space (programmatic advertising), and performance measurement. The service provider is Adform A/S, Rosenborggade 15, 2nd Floor, 1130 Copenhagen, Denmark.

Purpose & Processed Data:

The service is used to present personalized advertisements to you across various devices (targeting and retargeting) and to analyze how you interact with these ads (conversion tracking). Once you consent to the tracking, Adform collects extensive identification and interaction data. This includes: your IP address, date and time of the visit, specific device and browser information (including operating system), unique device identifiers, cross-device IDs, partner IDs, viewed and clicked advertisements, search terms, referrer URL, and the geographical location derived from the IP address.

Integration into the Tracking Architecture:

Adform is strictly integrated into our Consent Management System (Usercentrics). This means that Adform's tracking pixels and data collection are only triggered and can form user profiles if you have given your explicit consent (opt-in) for the "Marketing" category.

Technologies (Cookies & Pixels):

Adform uses specific tracking technologies (tracking pixels/web beacons and cookies) in your browser for recognition, cross-device tracking, and controlling ad delivery. The uid cookie serves as a unique user ID for recognition and retargeting (Validity: 60 days). The C, CM, and CM14 cookies are used to check whether cookies are accepted and for "cookie matching" with other advertising networks to evaluate campaigns. Depending on the cookie and status, validity is 1 day (CM), 14 days (CM14), 60 days (C), and up to 3650 days in the case of an active opt-out cookie. The arcki2 and arcki2_adform cookies are used to collect analytics and interaction data (Validity: 15 days). The cache0 cookie serves technical caching purposes in ad delivery (Validity: 365 days).

Data Transfer:

Adform A/S is headquartered in Denmark. Therefore, the processing of your data primarily takes place in data centers within the European Union. If Adform uses subcontractors or partners in insecure third countries within the scope of global ad delivery, the provider relies on Standard Contractual Clauses (SCCs) approved by the EU Commission. By consenting to this privacy policy, you also consent to your personal data being transferred to insecure third countries in accordance with Art. 17 FADP. Further information can be found in Adform's privacy policy.

Legal Basis:

The use of Adform and the associated storage of cookies, as well as the reading of user data, takes place exclusively based on your explicit consent in accordance with Art. 31 Para. 1 FADP (analogous to Art. 6 Para. 1 lit. a GDPR). You can revoke this consent at any time via our cookie settings (Usercentrics) with effect for the future.

Retention Period:

According to the provider, the collected, cookie-based interaction data and profiles are stored on Adform's servers for a maximum of 13 months and are subsequently deleted or anonymized.

International Transfer Status:

You must check the "This Service is sharing data outside of the EU / EEA (International Transfer)" option for this service.

Adtraction (Affiliate Marketing & Performance Measurement)

SWISS CASINO uses the affiliate network Adtraction on its website to measure the success of partner campaigns and to correctly allocate commissions. The service provider is Adtraction AB, Birger Jarlsgatan 9, 111 45 Stockholm, Sweden.

Purpose & Processed Data:

The service is used to track whether you reached our website via an affiliate partner's advertisement or link and subsequently carried out a defined action (conversion, such as a registration or deposit). Once you consent to the tracking, Adtraction collects relevant identification and transaction data. This includes: your IP address, date and time of the visit, browser information (including browser language), access status, referrer URL, contact information, a personal identification number (e.g., click ID or transaction ID to allocate the click), and payment information (e.g., deposit amount for commission calculation).

Integration into the Tracking Architecture:

Adtraction is strictly integrated into our Consent Management System (Usercentrics). This means that Adtraction's data collection is only triggered if you have given your explicit consent (opt-in) for the "Marketing" category. Notably, the technical integration of Adtraction on our website is executed server-side (Server-Side-Container) originating from the Google Analytics 4 (GA4) data stream to ensure secure and controlled data processing. Further information on server-side filtering can be found in the section above.

Technologies (Cookies & Pixels):

Adtraction uses JavaScript as well as specific technologies (cookies/storage) in your browser for session control, obtaining consent status, and correctly assigning affiliate clicks. The ASP.NET_SessionId serves to technically maintain the user session during the visit to the platform. The CookieConsent stores the user's consent status for the respective tracking services. The images / lang data serve to store display preferences (such as language) or as a technical resource for delivering advertising media.

Data Transfer:

Adtraction AB is headquartered in Sweden. Therefore, the processing of your data primarily takes place in data centers within the European Union. According to the provider, however, data may also be forwarded to recipients such as Google LLC and Facebook Inc. This can result in data transmission to the United States of America. If data is transferred to insecure third countries, the provider relies on Standard Contractual Clauses (SCCs) approved by the EU Commission. By consenting to this privacy policy, you also consent to your personal data being transferred to insecure third countries in accordance with Art. 17 FADP. Further information can be found in Adtraction's privacy policy.

Legal Basis:

The use of Adtraction and the associated data processing takes place exclusively based on your explicit consent in accordance with Art. 31 Para. 1 FADP (analogous to Art. 6 Para. 1 lit. a GDPR). You can revoke this consent at any time via our cookie settings (Usercentrics) with effect for the future.

Retention Period:

The collected data is processed and stored by Adtraction as long as this is necessary for the assignment and billing of affiliate commissions, and is subsequently deleted or anonymized.

International Transfer Status:

You must check the "This Service is sharing data outside of the EU / EEA (International Transfer)" option for this service.

The Trade Desk / adsrvr (Programmatic Advertising & Retargeting)

Provider: For the European region, the service is provided by The Trade Desk Ltd., 10th Floor, 1 Bartholomew Close, London EC1A 7BL, United Kingdom. The parent company is The Trade Desk, Inc., 42 N Chestnut St, Ventura, CA 93001, USA.

Purpose & Processed Data:

The service is used within the framework of so-called programmatic advertising to purchase advertising space in real-time on various platforms, display highly personalized advertising to you (retargeting), and measure the success of these campaigns. Once you consent to the tracking, The Trade Desk collects extensive interaction data. This includes, in particular: your IP address, date and time of the server request, device identifiers, browser information, surfing behavior on our website, and unique cookie IDs for cross-device tracking.

Technologies:

To build profiles and recognize users, the service uses tracking technologies such as cookies and tracking pixels (web beacons) in your browser. This tracking is strictly controlled via our Consent Management System and is only activated if you have given your explicit consent (opt-in).

Data Transfer:

As part of The Trade Desk's global advertising infrastructure, the collected data is transferred to the parent company's servers in the USA. We have agreed with the provider that such a transfer to the USA is based on the Swiss-US Data Privacy Framework (DPF) or, should the Data Privacy Framework be declared invalid, based on Standard Contractual Clauses alongside appropriate and proportionate technical and organizational measures. By consenting to this privacy policy, you simultaneously agree that your personal data may be transferred to insecure third countries under Art. 17 FADP. Further information is available in The Trade Desk's privacy policy.

Legal Basis:

The use of The Trade Desk (adsrvr) and the associated storage of cookies, as well as the reading of user data, occurs exclusively based on your explicit consent under Art. 31 Para. 1 FADP (analogous to Art. 6 Para. 1 lit. a GDPR). You may revoke this consent at any time with future effect via our cookie settings (Usercentrics).

Retention Period:

The cookies set on your device have a maximum lifespan defined by the provider (typically up to 12 months). User profiles and log data captured in the platform are deleted or anonymized according to The Trade Desk's policies once they are no longer required for target group formation and campaign evaluation.

International Transfer Status:

You must check the "This Service is sharing data outside of the EU / EEA (International Transfer)" option for this service.

Google Conversion Linker (Conversion Tracking & Ad Attribution)

SWISS CASINO uses the "Google Conversion Linker" on its website, a tool to optimize the performance measurement of advertising campaigns. The service provider for users in Europe and Switzerland is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The parent company is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Purpose & Processed Data:

The service is used to ensure that clicks on our advertisements (e.g., on Google Ads) can be reliably attributed to a subsequent action on our website (conversion, such as a registration). Once you consent to the tracking, the Conversion Linker captures information regarding the click on the ad (e.g., the Google Click ID, GCLID). This includes IP address, date, time, browser information, and the referrer URL.

Technologies:

To counter tracking restrictions of certain browsers, the Conversion Linker stores click information in so-called first-party cookies in your browser. This tracking is strictly controlled via our Consent Management System and is only activated if you have given your explicit consent (opt-in).

Data Transfer:

The collected data is generally transferred to servers of the parent company Google LLC in the USA. We have agreed with Google that such a transfer to the USA is based on the Swiss-US Data Privacy Framework (DPF) or, should the Data Privacy Framework be declared invalid, based on Standard Contractual Clauses alongside appropriate and proportionate technical and organizational measures. By consenting to this privacy policy, you simultaneously agree that your personal data may be transferred to insecure third countries under Art. 17 FADP. Further information is available in Google's privacy policy.

Legal Basis:

The use of the Google Conversion Linker and the associated storage of cookies, as well as the reading of user data, occurs exclusively based on your explicit consent under Art. 31 Para. 1 FADP (analogous to Art. 6 Para. 1 lit. a GDPR). You may revoke this consent at any time with future effect via our cookie settings (Usercentrics).

Retention Period:

The cookies set on your device have a maximum lifespan defined by the provider (often up to 90 days). The log data and click information recorded on Google's servers are deleted or anonymized according to Google's internal policies once they are no longer required for campaign evaluation.

International Transfer Status:

You must check the "This Service is sharing data outside of the EU / EEA (International Transfer)" option for this service.

DoubleClick Ad / Google Marketing Platform (Adserving & Programmatic Advertising)

SWISS CASINO uses services of the "Google Marketing Platform" (formerly known as DoubleClick or DoubleClick Ad Exchange) on its website, a comprehensive system for controlling and evaluating digital advertising campaigns. The provider for users in Europe and Switzerland is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The parent company is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Purpose & Processed Data:

The services (such as Display & Video 360 or Campaign Manager) are used to strategically purchase advertisements across various platforms (programmatic advertising), display highly personalized advertising to you (retargeting), and measure whether you perform a specific action on our website after clicking an ad (conversion tracking via "Floodlight"). Once you consent to the tracking, Google collects extensive interaction data. This specifically includes: your IP address, date and time of the server request, device identifiers, browser information, surfing behavior, and unique cookie IDs to recognize you across devices and websites.

Integration into the Tracking Architecture:

The technical integration of this service on our website occurs server-side via a Tag Manager Server Container to ensure secure data processing. Further information on server-side filtering can be found in the section above regarding the Usercentrics Consent Management Platform.

Technologies:

For profiling, campaign control (e.g., frequency capping), and recognition, the service sets specific tracking technologies (particularly cookies such as "IDE" or "DSID" as well as tracking pixels) in your browser. This tracking is strictly controlled via our Consent Management System and is only activated if you have given your explicit consent (opt-in).

Data Transfer:

The collected data is generally transferred to servers of the parent company Google LLC in the USA and linked with existing Google profiles there. We have agreed with Google that such a transfer to the USA is based on the Swiss-US Data Privacy Framework (DPF) or, should the Data Privacy Framework be declared invalid, based on Standard Contractual Clauses alongside appropriate and proportionate technical and organizational measures. By consenting to this privacy policy, you simultaneously agree that your personal data may be transferred to insecure third countries under Art. 17 FADP. Further information is available in Google's privacy policy.

Legal Basis:

The use of the Google Marketing Platform (DoubleClick) and the associated storage of cookies, as well as the reading of user data, occurs exclusively based on your explicit consent under Art. 31 Para. 1 FADP (analogous to Art. 6 Para. 1 lit. a GDPR). You may revoke this consent at any time with future effect via our cookie settings (Usercentrics).

Retention Period:

The cookies set on your device have a maximum lifespan defined by the provider (typically up to 13 months). User profiles and log data captured in the platform are deleted or anonymized according to Google's internal policies once they are no longer required for target group formation and campaign evaluation.

International Transfer Status:

You must check the "This Service is sharing data outside of the EU / EEA (International Transfer)" option for this service.

Microsoft Advertising (Search Engine Marketing & Conversion Tracking)

SWISS CASINO uses the online advertising program "Microsoft Advertising" (formerly Bing Ads) on its website. The provider for users in Europe and Switzerland is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. The parent company is Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA.

Purpose & Processed Data:

The service is used to deliver targeted advertisements in the Microsoft search network (e.g., Bing, Yahoo) and measure their success (conversion tracking). Once you consent to the tracking, Microsoft Advertising collects information about clicks on ads and subsequent actions on our website. This specifically includes your IP address, search queries, device information, and the accessed URLs.

Technologies:

For recognition and campaign measurement, the service sets specific tracking technologies (particularly cookies like the so-called UET tag) in your browser. This tracking is strictly controlled via our Consent Management System and is only activated if you have given your explicit consent (opt-in).

Data Transfer:

The collected data is generally transferred to servers of the parent company Microsoft Corporation in the USA. We have agreed with the provider that such a transfer to the USA is based on the Swiss-US Data Privacy Framework (DPF) or, should the Data Privacy Framework be declared invalid, based on Standard Contractual Clauses alongside appropriate and proportionate technical and organizational measures. By consenting to this privacy policy, you simultaneously agree that your personal data may be transferred to insecure third countries under Art. 17 FADP. Further information is available in Microsoft's privacy policy.

Legal Basis:

The use of Microsoft Advertising and the associated storage of cookies, as well as the reading of user data, occurs exclusively based on your explicit consent under Art. 31 Para. 1 FADP. You may revoke this consent at any time with future effect via our [Link: Cookie Settings].

Retention Period: The cookies set on your device for conversion measurement have a maximum lifespan defined by the provider (typically up to 13 months). The log data captured on the servers are anonymized or deleted according to Microsoft's internal policies once they are no longer required for evaluation.

International Transfer Status: You must check the "This Service is sharing data outside of the EU / EEA (International Transfer)" option for this service.

Outbrain (Content Recommendations & Native Advertising)

SWISS CASINO uses the services of "Outbrain", a native advertising platform, on its website. The provider is Outbrain Inc., 111 West 19th Street, New York, NY 10011, USA.

Purpose & Processed Data:

The service is used to recommend further, thematically relevant content and advertisements within our website. Once you consent to the tracking, Outbrain captures information about the content you have read, your interactions (clicks), IP address, browser information, and a device-specific UUID (Unique User ID).

Integration into the Tracking Architecture:

The technical integration of this service on our website occurs server-side via a Tag Manager Server Container to ensure secure data processing. Further information on server-side filtering can be found in the section above regarding the Usercentrics Consent Management Platform.

Technologies:

To create the interest profile and control recommendations, Outbrain sets specific tracking technologies in your browser. This tracking is strictly controlled via our Consent Management System and is only activated if you have given your explicit consent (opt-in).

Data Transfer:

The collected data is transferred to Outbrain's servers in the USA. We have agreed with the provider that such a transfer to the USA is based on the Swiss-US Data Privacy Framework (DPF) or, should the Data Privacy Framework be declared invalid, based on Standard Contractual Clauses alongside appropriate and proportionate technical and organizational measures. By consenting to this privacy policy, you simultaneously agree that your personal data may be transferred to insecure third countries under Art. 17 FADP. Further information is available in Outbrain's privacy policy.

Legal Basis:

The use of Outbrain and the associated storage of cookies, as well as the reading of user data, occurs exclusively based on your explicit consent under Art. 31 Para. 1 FADP. You may revoke this consent at any time with future effect via our [Link: Cookie Settings].

Retention Period:

The set cookies and profiles have a lifespan defined by the provider and are typically anonymized or deleted after a certain period of inactivity.

International Transfer Status:

You must check the "This Service is sharing data outside of the EU / EEA (International Transfer)" option for this service.

Snapchat & Snapchat Advertising (Social Media Tracking & Retargeting)

SWISS CASINO uses the advertising and tracking technologies ("Snap Pixel") of Snapchat on its website. The provider for the European region is Snap Group Limited, 50 Cowcross Street, Floor 2, London, EC1M 6AL, United Kingdom. The parent company is Snap Inc., 3000 31st Street, Santa Monica, CA 90405, USA.

Purpose & Processed Data:

The services are used to measure the success of our advertisements on Snapchat (conversion tracking) and to display personalized advertising to you within the app based on your website visits (retargeting). Once you consent, Snap captures technical data (such as IP address, device ID, browser type), accessed pages, and performed actions (e.g., registrations).

Integration into the Tracking Architecture:

The technical integration of this service on our website occurs server-side via a Tag Manager Server Container to ensure secure data processing. Further information on server-side filtering can be found in the section above regarding the Usercentrics Consent Management Platform.

Technologies:

For cross-device recognition and profiling, Snap sets specific tracking technologies (such as cookies and the Snap Pixel) in your browser. This tracking is strictly controlled via our Consent Management System and is only activated if you have given your explicit consent (opt-in).

Data Transfer:

The collected data is generally transferred to servers of the parent company Snap Inc. in the USA. We have agreed with the provider that such a transfer to the USA is based on the Swiss-US Data Privacy Framework (DPF) or, should the Data Privacy Framework be declared invalid, based on Standard Contractual Clauses alongside appropriate and proportionate technical and organizational measures. By consenting to this privacy policy, you simultaneously agree that your personal data may be transferred to insecure third countries under Art. 17 FADP. Further information is available in Snap's privacy policy.

Legal Basis:

The use of Snapchat and the associated storage of cookies, as well as the reading of user data, occurs exclusively based on your explicit consent under Art. 31 Para. 1 FADP. You may revoke this consent at any time with future effect via our [Link: Cookie Settings].

Retention Period:

The cookies set on your device have a maximum lifespan defined by the provider. Event data recorded on the servers are routinely deleted or anonymized according to Snap's internal policies.

International Transfer Status:

You must check the "This Service is sharing data outside of the EU / EEA (International Transfer)" option for this service.

Teads (Video & Display Advertising)

SWISS CASINO uses the technology of "Teads", a platform for digital video and display advertising, on its website. The provider of the service is Teads S.A., 5 rue de la Boucherie, L-1247 Luxembourg.

Purpose & Processed Data:

The service is used to optimally integrate advertisements (especially outstream video formats) into our content, target them to specific audiences, and collect campaign statistics. Once you consent, Teads processes technical interaction data, your IP address, device metadata, and pseudonymous IDs to control the frequency of delivery.

Technologies:

To measure performance and avoid redundant ad delivery, the service sets tracking technologies (specifically cookies) in your browser. This tracking is strictly controlled via our Consent Management System and is only activated if you have given your explicit consent (opt-in).

Data Transfer:

The processing of your data by Teads takes place on servers and data centers within the European Union. A transfer to insecure third countries within the meaning of Art. 17 FADP does not occur via this service. Further information is available in Teads's privacy policy.

Legal Basis:

The use of Teads and the associated storage of cookies, as well as the reading of user data, occurs exclusively based on your explicit consent under Art. 31 Para. 1 FADP. You may revoke this consent at any time with future effect via our [Link: Cookie Settings].

Retention Period:

The set cookies have a lifespan defined by the provider. Server-side profiles are deleted once they are no longer required for reporting.

International Transfer Status:

You do not need to check the "This Service is sharing data outside of the EU / EEA (International Transfer)" option for this service.

Twitter / X Advertising (Social Media Tracking & Retargeting)

SWISS CASINO uses the "Twitter Website Tag" (now X) on its website to optimize and measure the performance of our advertising campaigns. The provider for users outside the USA is Twitter International Unlimited Company, One Cumberland Place, Fenian Street, Dublin 2, Ireland. The parent company is X Corp., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA.

Purpose & Processed Data:

The service is used to measure the success of our advertisements on the X platform (conversion tracking) and to display tailored advertising to you on X based on your behavior on our website (retargeting). Once you consent, X captures technical data such as IP address, device IDs, browser type, and information regarding your page views.

Technologies:

For cross-device recognition and profiling, X sets specific tracking technologies (particularly tracking pixels and cookies) in your browser. This tracking is strictly controlled via our Consent Management System and is only activated if you have given your explicit consent (opt-in).

Data Transfer:

The collected data is generally transferred to servers of the parent company X Corp. in the USA. We have agreed with the provider that such a transfer to the USA is based on the Swiss-US Data Privacy Framework (DPF) or, should the Data Privacy Framework be declared invalid, based on Standard Contractual Clauses alongside appropriate and proportionate technical and organizational measures. By consenting to this privacy policy, you simultaneously agree that your personal data may be transferred to insecure third countries under Art. 17 FADP. Further information is available in the privacy policy of X (Twitter).

Legal Basis:

The use of Twitter Advertising and the associated storage of cookies, as well as the reading of user data, occurs exclusively based on your explicit consent under Art. 31 Para. 1 FADP. You may revoke this consent at any time with future effect via our [Link: Cookie Settings].

Retention Period:

The set cookies have a maximum lifespan defined by the provider. Log data captured on the servers and associated profiles are deleted or anonymized according to X Corp.'s internal policies.

International Transfer Status:

You must check the "This Service is sharing data outside of the EU / EEA (International Transfer)" option for this service.