I handle the privacy of every casino sankra user seriously. As a data controller based in Norway, I process personal information in full compliance with the General Data Protection Regulation and the Norwegian Personal Data Act. A Data Subject Access Request enables you inquire me exactly what personal data I maintain about your account, how it is utilized, and who it is transmitted with. This guide describes how to make a DSAR, what to anticipate, and how I protect your rights throughout the process.
Understanding Your Data Subject Access Request
A Data Subject Access Request is a formal mechanism created by Article 15 of the GDPR. It provides you the right to obtain confirmation that I process personal data about you and to obtain a copy of that data. You can also discover why I manage it, which categories of data are relevant, and the recipients or categories of recipients I disclose it with, such as payment providers and regulatory compliance bodies. The DSAR is a powerful transparency tool.
The scope of a DSAR is intentionally broad. It encompasses all personal information directly or indirectly connected to your Sankra Casino account, including registration details, transaction logs, responsible gaming records, and correspondence. I deliver the data in a structured, commonly used machine-readable format such as JSON or CSV, unless you specify for a simple document.
Identity Confirmation and Safety
Why I Need to Confirm Your Identity
Before releasing any personal data, I must be sure I am communicating with the real data subject. This precaution prevents unauthorised access and identity fraud. GDPR requires me to take appropriate steps to verify your identity, particularly when sensitive information is involved. I consequently ask for supporting documents, but I process them securely and delete the verification data as soon as the process finishes.
Accepted Documents for Verification
You can verify your identity by providing a clear copy of a valid passport, national ID card, or driving licence. If your account details have changed, I may also request a recent utility bill showing your registered address. Please obscure unnecessary sensitive information such as passport numbers. I only request the photograph and full name for verification. Digital copies sent through encrypted email are ideal.
Response Timelines and Possible Limitations
Under GDPR, I need to reply to your DSAR promptly, and at the latest within a month of obtaining the authenticated request. If your request is intricate or you file multiple requests, I may prolong this period by up to two extra months. I will notify you of any prolongation within the first month, together with the grounds for the delay, so you are never in doubt.
Specific circumstances may hinder full disclosure, for example if releasing the data would harm others’ rights or expose confidential business data. In such cases I censor or deny the relevant portion. I offer the first response at no cost, but if you make manifestly unfounded or disproportionate requests, I may charge a fee or choose not to act, always explaining the reason and your right to lodge a complaint to the Datatilsynet.
Your personal Legal Rights Per GDPR and Norwegian Law
The Access Right Under Article 15
Article 15 of the GDPR, enforced in Norway through the Personal Data Act, gives every data subject the entitlement to ask for access to their personal data. I must confirm whether processing occurs, supply a copy of the data, and advise you of the objectives, categories, retention periods, and your associated rights. This legal foundation ensures you keep in control of your information while I preserve complete transparency.
Additional Rights That Support Your Access
In addition to access, you possess the right to rectification, erasure, restriction of processing, and data portability. If you believe your data is inaccurate or partial, you can request me to fix it. Under certain situations you can also demand deletion. I reference these because a DSAR is commonly the first step before applying other rights. Understanding the full scope assists you formulate precise requests.
What Information You Will Receive
Groups of Personal Data I Hold
My response to your DSAR provides a detailed overview of the en.wikipedia.org personal data I keep. This usually includes identity data, contact details, account transaction history, deposit and withdrawal records, responsible gambling markers, communication logs with support, and any documents you uploaded for KYC purposes. I also reveal if automated decision-making is used, such as risk profiling.
Format and Delivery of Your Data
I supply the requested data in a portable electronic format, typically a password-protected PDF or a machine-readable CSV file. If you would rather a printed copy sent by secure post, I can arrange that upon request. The response also includes an explanatory cover letter that maps each piece of data to the processing purpose and the legal basis, making the information easy to understand.
Steps to Submit a DSAR to Sankra Casino
Necessary Information for a Valid Request
To process your request quickly, I need clear identification details. Provide your full name, the email address registered to your Sankra Casino account, and your username or account number. Outline the specific data you want to access. A general request is valid, but specifying it speeds up the process. Indicate if you need the reply in a particular language or format.
Submission Channels and Address
Send your DSAR by email to our dedicated Data Protection Officer at dataprotection@sankra.no. Otherwise, you can mail a signed written request to Sankra Casino’s registered address in Norway. I advise using email for speed and security. All incoming DSARs are logged and acknowledged within two business days.
FAQ
Is it possible to ask for data about someone else, like a family member?
Information is released solely to the person it relates to. For privacy protection, I will not release information about someone else, even a relative. If you have legal authority like a power of attorney, provide that documentation. If not, the other person must submit their own DSAR.
What if I have forgotten my registered email address?
In case you forgot your email, contact support with your complete name, date of birth, and registered home address or telephone. Your identity can be confirmed and account information retrieved, after which the DSAR will be processed. This may add a few days, but I will keep you informed.
How long do you keep my data after I close my account?
I retain personal data as long as required by Norwegian anti-money laundering rules, typically five years after closure. After retention, data is securely deleted unless a longer period is legally mandated or needed for legal claims. Detailed retention periods appear in my privacy notice.
Can I get a copy of my closed account data?
Absolutely. Even after you close your Sankra Casino account, your right of access remains. You can submit a DSAR for the data I still hold. The steps are unchanged: present identification and state the information you seek. The archived data will be retrieved and provided within the same legal deadline.
What happens if I am unhappy with the reply?
Should you think I have not adhered to requirements, get in touch for clarification. The issue will be reviewed and an additional response will be given. Additionally, you are entitled to lodge a complaint with the Data Protection Authority. An independent inquiry will be made to determine if I satisfied my responsibilities.
Does making a DSAR influence my account status?
No. Asserting your data protection rights carries no negative consequences for your account. I treat access requests neutrally and will not restrict your account, terminate services, or alter loyalty benefits because you asked for data. Transparency is fundamental here, and I encourage you to use your rights.
