I take the protection of every Sankra Casino user seriously. As a data controller established in Norway, I handle personal information in full accordance with the General Data Protection Regulation and the Norwegian Personal Data Act. A Data Subject Access Request allows you ask me precisely what personal data I store about your account, how it is utilized, and who it is shared with. This guide outlines how to file a DSAR, what to look forward to, and how I uphold your rights over the course of the process.
What Data You Will Receive
Types of Personal Data I Store
My reply to your DSAR provides a detailed outline of the personal data I hold. This usually encompasses identity data, contact details, account transaction history, deposit and withdrawal records, responsible gambling markers, communication logs with support, and any documents you uploaded for KYC purposes. I also disclose if automated decision-making is used, such as risk profiling.
Structure and Delivery of Your Data
I supply the requested data in a portable electronic format, typically a password-protected PDF or a machine-readable CSV file. If you prefer a printed copy sent by secure post, I can organize that upon request. The response also features an explanatory cover letter that maps each piece of data to the processing purpose and the legal basis, making the information easy to understand.
Answer Timeframes and Applicable Constraints
Under GDPR, I must respond to your DSAR without unnecessary delay, and at the latest within a month of getting the verified request. If your request is intricate or you make multiple requests, I may lengthen this period by up to two extra months. I will advise you of any extension within the first month, together with the justifications for the delay, so you are always kept informed.
Restricted circumstances may hinder full divulgence, for example if sharing the data would violate others’ rights or reveal confidential business details. In such cases I redact or reject the affected portion. I provide the first response without charge, but if you make manifestly unfounded or excessive requests, I may levy a charge or decline to act, always stating the reason and your right to complain to the Datatilsynet.
Method for Submit a DSAR to Sankra Casino
Required Information for a Valid Request
To process your request promptly, I need precise identification details. Supply your full name, the email address registered to your Sankra Casino account, and your username or account number. Specify the specific data you want to access. A general request is valid, but narrowing it down speeds up the process. Indicate if you need the reply in a particular language or format.
Communication Channels and Address
Send your DSAR by email to our dedicated Data Protection Officer at dataprotection@sankra.no. As an option, you can mail a signed written request to Sankra Casino’s registered address in Norway. I suggest using email for speed and security. All incoming DSARs are logged and acknowledged within two business days.
Your individual Legal Rights Per GDPR and Norwegian Law
The Entitlement to Access Pursuant to Article 15
Article 15 of the GDPR, enforced in Norway through the Personal Data Act, gives every data subject the entitlement to request access to their personal data. I must confirm whether processing occurs, supply a copy of the data, and advise you of the aims, categories, retention periods, and your related rights. This legal foundation secures you keep in control of your information while I maintain complete transparency.
Extra Rights That Underpin Your Access
Beyond access, you have the right to rectification, erasure, restriction of processing, and data portability. If you think your data is wrong or partial, you can ask me to fix it. Under certain circumstances you can also request deletion. I note these because a DSAR is frequently the first step before exercising other rights. Being aware of the full scope aids you make precise requests.
Identity Confirmation and Safety
Why I Have to Authenticate Your Identity
Before releasing any personal data, I must be confident I am communicating with the genuine data subject. This precaution prevents unauthorised access and identity fraud. GDPR requires me to take appropriate steps to verify your identity, especially when sensitive information is involved. I consequently ask for supporting documents, but I process them securely and erase the verification data as soon as the process finishes.
Valid Documents for Verification
You can authenticate your identity by submitting a clear copy of a valid passport, national ID card, or driving licence. If your account details have changed, I may also request a recent utility bill showing your registered address. Please remove unnecessary sensitive information such as passport numbers. I only request the photograph and full name for verification. Digital copies sent through encrypted email are ideal.
Common Questions
Is it possible to ask for data about someone else, like a family member?
I can only disclose data to the person it concerns. To safeguard privacy, I cannot provide details about another person, including a relative. Should you possess legal authority such as a power of attorney, please submit that paperwork. If not, the other person must submit their own DSAR.
What if I have forgotten my registered email address?
If you misplaced your email, reach out to support providing your full name, date of birth, and registered mailing address or phone number. Your identity can be confirmed and account information retrieved, after which the DSAR will be processed. This might cause a short delay, but I will notify you throughout.
What is the data retention period after I close my account?
I hold personal data for the period stipulated by Norwegian anti-money laundering laws, generally five years after account closure https://sankra.no/legal-and-affiliates/. Following the retention period, data is safely erased unless a longer duration is required by law or necessary for legal proceedings. Detailed retention periods appear in my privacy notice.
Can I get a copy of my closed account data?
Yes. Even following the closure of your Sankra Casino account, your access rights continue. A DSAR can be submitted for the data I continue to keep. The steps are unchanged: present identification and state the information you seek. I will find the stored records and deliver them within the same statutory period.
What happens if I am unhappy with the reply?
Should you think I have not adhered to requirements, get in touch for clarification. The issue will be reviewed and an additional response will be given. You may also file a grievance with the Data Protection Authority. An independent inquiry will be made to determine if I satisfied my responsibilities.
Will filing a DSAR impact my account standing?
No. Exercising your data protection rights has no negative impact on your account. I treat access requests neutrally and will not restrict your account, terminate services, or alter loyalty benefits because you asked for data. Clarity is key, and I encourage you to make use of your entitlements.
Grasping Your Data Subject Access Request
A Data Subject Access Request represents a formal mechanism introduced by Article 15 of the GDPR. It provides you the right to obtain confirmation that I manage personal data about you and to get a copy of that data. You can also learn why I manage it, which categories of data are relevant, and the recipients or categories of recipients I transmit it with, such as payment providers and regulatory compliance bodies. The DSAR is a strong transparency tool.
The scope of a DSAR is intentionally broad. It covers all personal information directly or indirectly connected to your Sankra Casino account, including registration details, transaction logs, responsible gaming records, and correspondence. I provide the data in a structured, commonly used machine-readable format such as JSON or CSV, unless you ask for a simple document.
