# AZOP (Croatia) - Croatian Gambling Operator

- Type: News
- Source: GDPRhub
- Date: 2026-10-11
- Original: https://gdprhub.eu/index.php?title=AZOP_(Croatia)_-_Croatian_Gambling_Operator
- Canonical: https://overview.legal/posts/595693
- Topics: Special Categories of Data, Controllers, Personal Data, Consent, Voluntary Own-Initiative Investigations, Types of Special Categories of Personal Data, Identification, Consent Validity Requirements and Conditions, Supervisory Authorities, Biometric Data

## Summary

The DPA fined a gambling operator €2.59 m for processing biometric data without valid consent and beyond the necessary scope, bundling multiple purposes into single consent, and providing incomplete and inconsistent processing information. English Summary. Facts. The DPA initiated an ex officio investigation against a gambling operator (controller) regarding the identification and registration of players (data subjects) visiting its casino. The controller verified data subjects' identities

## Full text

The DPA fined a gambling operator €2.59 m for processing biometric data without valid consent and beyond the necessary scope, bundling multiple purposes into single consent, and providing incomplete and inconsistent processing information. English Summary. Facts. The DPA initiated an ex officio investigation against a gambling operator (controller) regarding the identification and registration of players (data subjects) visiting its casino. The controller verified data subjects' identities at its casino using physical identity cards. To expedite identification during subsequent visits, it also offered data subjects the option to use an RFID chip or fingerprint scanning . On the basis of the data subjects' consent, the controller collected fingerprint scans from 34,933 data subjects. Although the controller claimed to collect two fingerprints, the investigation established that it actually scanned four fingers (two per hand) for biometric identification of data subjects. The c

---
Generated by overview.legal · https://overview.legal/posts/595693 · 2026-10-12