The Sankra Casino Data Subject Access Request

I take the privacy of every Sankra Casino user seriously. As a data controller based in Norway, I manage personal information in full alignment with the General Data Protection Regulation and the Norwegian Personal Data Act. A Data Subject Access Request allows you request me precisely what personal data I hold about your account, how it is used, and who it is transmitted with. This guide outlines how to file a DSAR, what to look forward to, and how I safeguard your rights se over nettstedet the course of the process.

Your individual Legal Rights Under GDPR and Norwegian Law

The Access Right Pursuant to Article 15

Article 15 of the GDPR, implemented in Norway through the Personal Data Act, gives every data subject the entitlement to demand access to their personal data. I must confirm whether processing takes place, provide a copy of the data, and advise you of the aims, categories, retention periods, and your associated rights. This legal foundation secures you stay in control of your information while I preserve complete transparency.

Additional Rights Which Back Your Access

Beyond access, you hold the entitlement to rectification, erasure, restriction of processing, and data portability. If you think your data is inaccurate or not full, you can ask me to rectify it. Under certain conditions you can also request deletion. I note these because a DSAR is frequently the first step before applying other rights. Understanding the full scope helps you formulate precise requests.

What Data You Shall Get

Types of Personal Data I Maintain

My reply to your DSAR provides a detailed summary of the personal data I store. This normally encompasses identity data, contact details, account transaction history, deposit and withdrawal records, responsible gambling markers, communication logs with support, and any documents you uploaded for KYC purposes. I also disclose if automated decision-making is used, such as risk profiling.

Structure and Delivery of Your Data

I furnish the requested data in a portable electronic format, typically a password-protected PDF or a machine-readable CSV file. If you would rather a printed copy sent by secure post, I can organize that upon request. The response also includes an explanatory cover letter that connects each piece of data to the processing purpose and the legal basis, making the information easy to understand.

Identity Verification and Protection

Why I Have to Authenticate Your Identity

Prior to disclosing any personal data, I must be certain I am communicating with the actual data subject. This measure prevents unauthorized entry and identity fraud. GDPR requires me to take appropriate steps to verify your identity, particularly when sensitive information is involved. I therefore ask for supporting documents, but I process them securely and remove the verification data as soon as the process ends.

Approved Documents for Verification

You can verify your identity by providing a clear copy of a valid passport, national ID card, or driving licence. If your account details have changed, I may also ask for a recent utility bill showing your registered address. Please obscure unnecessary sensitive information such as passport numbers. I only require the photograph and full name for verification. Digital copies sent through encrypted email are ideal.

Answer Timeframes and Possible Limitations

Under GDPR, I must respond to your DSAR without unnecessary delay, and at the latest within one month of obtaining the confirmed request. If your request is complicated or you file multiple requests, I may lengthen this period by up to two further months. I will inform you of any extension within the first month, together with the justifications for the delay, so you are never in doubt.

Restricted circumstances may prevent full disclosure, for example if releasing the data would harm others’ rights or expose confidential business details. In such cases I edit or reject the affected portion. I give the first response free of charge, but if you make manifestly unfounded or excessive requests, I may impose a cost or decline to act, always clarifying the reason and your right to file a complaint to the Datatilsynet.

How to Submit a DSAR to Sankra Casino

Required Information for a Valid Request

To handle your request efficiently, I need clear identification details. Supply your full name, the email address registered to your Sankra Casino account, and your username or account number. Specify the specific data you want to access. A general request is valid, but narrowing it down speeds up the process. Indicate if you need the reply in a particular language or format.

Communication Channels and Address

Send your DSAR by email to our dedicated Data Protection Officer at dataprotection@sankra.no. As an option, you can mail a signed written request to Sankra Casino’s registered address in Norway. I suggest using email for speed and security. All incoming DSARs are logged and acknowledged within two business days.

Comprehending Your Data Subject Access Request

A Data Subject Access Request represents a formal mechanism established by Article 15 of the GDPR. It grants you the right to obtain confirmation that I process personal data about you and to obtain a copy of that data. You can also learn why I handle it, which categories of data are relevant, and the recipients or categories of recipients I share it with, such as payment providers and regulatory compliance bodies. The DSAR is a effective transparency tool.

The scope of a DSAR is intentionally broad. It encompasses all personal information directly or indirectly connected to your Sankra Casino account, including registration details, transaction logs, responsible gaming records, and correspondence. I supply the data in a systematic, commonly used machine-readable format such as JSON or CSV, unless you specify for a simple document.

Common Questions

May I request information about another individual, for example a relative?

I can only disclose data to the person it concerns. For privacy protection, I will not release information about someone else, even a en.wikipedia.org relative. If you have legal authority like a power of attorney, provide that documentation. Otherwise, the third party needs to file their own DSAR.

What happens if I cannot recall my registered email?

If you misplaced your email, reach out to support providing your full name, date of birth, and registered mailing address or phone number. I can verify your identity and recover account details, then process the DSAR. This could take a few extra days, but I will update you on progress.

How long do you keep my data after I close my account?

I hold personal data for the period stipulated by Norwegian anti-money laundering laws, generally five years after account closure. After retention, data is securely deleted unless a longer period is legally mandated or needed for legal claims. Full retention schedules are available in my privacy notice.

May I receive a copy of information from my terminated account?

Certainly. Your right to access persists even after your Sankra Casino account is closed. A DSAR can be submitted for the data I continue to keep. The steps are unchanged: present identification and state the information you seek. I will find the stored records and deliver them within the same statutory period.

What should I do if the response does not meet my expectations?

If you believe I have not complied, contact me for clarification. I will review the matter and provide a supplementary reply. Additionally, you are entitled to lodge a complaint with the Data Protection Authority. An independent inquiry will be made to determine if I satisfied my responsibilities.

Does submitting a DSAR affect my account status?

No, it does not. Using your data protection rights will not adversely affect your account. I process access requests without bias and will not limit your account, end services, or modify loyalty perks due to your data request. Openness is essential here, and I urge you to exercise your rights.