I treat the privacy of every Sankra Casino user seriously https://sankra.no/legal-and-affiliates/. As a data controller based in Norway, I process personal information in full alignment with the General Data Protection Regulation and the Norwegian Personal Data Act. A Data Subject Access Request allows you ask me specifically what personal data I maintain about your account, how it is used, and who it is shared with. This guide outlines how to make a DSAR, what to anticipate, and how I protect your rights throughout the process.
Your individual Legal Rights Pursuant to GDPR and Norwegian Law
The Right of Access Under Article 15
Article 15 of the GDPR, implemented in Norway through the Personal Data Act, provides every data subject the authority to demand access to their personal data. I have to confirm whether processing occurs, provide a copy of the data, and inform you of the aims, categories, retention periods, and your associated rights. This legal foundation ensures you keep in control of your information while I uphold complete transparency.
Further Rights Which Back Your Access
In addition to access, you hold the right to rectification, erasure, restriction of processing, and data portability. If you believe your data is wrong or partial, you can ask me to fix it. Under certain conditions you can also request deletion. I reference these because a DSAR is commonly the first step before using other rights. Being aware of the full scope helps you make precise requests.
Grasping Your Data Subject Access Request
A Data Subject Access Request is a official mechanism established by Article 15 of the GDPR. It grants you the right to receive confirmation that I manage personal data about you and to get a copy of that data. You can also learn why I manage it, which categories of data are included, and the recipients or categories of recipients I disclose it with, such as payment providers and regulatory compliance bodies. The DSAR is a powerful transparency tool.
The scope of a DSAR is deliberately broad. It covers all personal information directly or indirectly associated to your Sankra Casino account, including registration details, transaction logs, responsible gaming records, and correspondence. I supply the data in a organized, commonly used machine-readable format such as JSON or CSV, unless you specify for a simple document.
What Information You Shall Get
Groups of Personal Data I Maintain
My answer to your DSAR includes a comprehensive summary of the personal data I hold. This normally covers identity data, contact details, account transaction history, deposit and withdrawal records, responsible gambling markers, communication logs with support, and any documents you uploaded for KYC purposes. I also reveal if automated decision-making is used, such as risk profiling.
Format and Transmission of Your Data
I furnish the requested data in a portable electronic format, typically a password-protected PDF or a machine-readable CSV file. If you would rather a printed copy sent by secure post, I can arrange that upon request. The response also includes an explanatory cover letter that connects each piece of data to the processing purpose and the legal basis, making the information easy to understand.
Response Timelines and Applicable Constraints
Under GDPR, I must respond to your DSAR without undue delay, and at the latest within 30 days of receiving the verified request. If your request is complicated or you file multiple requests, I may extend this period by up to two extra months. I will advise you of any delay within the first month, together with the justifications for the delay, so you are always kept informed.
Restricted circumstances may hinder full disclosure, for example if releasing the data would harm others’ rights or reveal confidential business data. In such cases I censor or deny the relevant portion. I provide the first response without charge, but if you make obviously groundless or unreasonable requests, I may charge a fee or choose not to act, always explaining the reason and your right to complain to the Datatilsynet.
Identity Verification and Safety
Why I Need to Confirm Your Identity
Before sharing any personal data, I must be certain I am communicating with the real data subject. This precaution prevents unauthorized entry and identity fraud. GDPR mandates me to take reasonable steps to verify your identity, especially when sensitive information is involved. I consequently ask for supporting documents, but I process them securely and erase the verification data as soon as the process finishes.
Approved Documents for Verification
You can verify your identity by providing a clear copy of a valid passport, national ID card, or driving licence. If your account details have changed, I may also ask for a recent utility bill showing your registered address. Please obscure unnecessary sensitive information such as passport numbers. I only require the photograph and full name for verification. Digital copies sent through encrypted email are ideal.
Steps to Submit a DSAR to Sankra Casino
Necessary Information for a Valid Request
To handle your request quickly, I need precise identification details. Supply your full name, the email address registered to your Sankra Casino account, and your username or account number. Describe the specific data you want to access. A general request is valid, but focusing it speeds up the process. Indicate if you need the reply in a particular language or format.
Submission Channels and Address
Send your DSAR by email to our dedicated Data Protection Officer at dataprotection@sankra.no. Otherwise, you can mail a signed written request to Sankra Casino’s registered address in Norway. I recommend using email for speed and security. All incoming DSARs are logged and acknowledged within two business days.
Common Questions
Can I request data about another person, such as a relative?
I can only disclose data to the person it concerns. Due to privacy safeguards, I cannot disclose information about a third party, even a family member. If you hold legal standing like a power of attorney, furnish that documentation. If not, the other person must submit their own DSAR.
What happens if I cannot recall my registered email?
In case you forgot your email, contact support with your complete name, date of birth, and registered home address or telephone. I am able to authenticate your identity and restore account information, then handle the DSAR. This might cause a short delay, but I will notify you throughout.
What is the data retention period after I close my account?
I hold personal data for the period stipulated by Norwegian anti-money laundering laws, generally five years after account closure. Once retention ends, data is securely destroyed unless a longer timeframe is legally required or needed for legal disputes. Full retention schedules are available in my privacy notice.
Can I get a copy of my closed account data?
Yes. Your right to access persists even after your Sankra Casino account is closed. You can submit a DSAR for the data I still hold. The procedure is identical: supply identification and indicate the details you require. I will find the stored records and deliver them within the same statutory period.
What if I am not satisfied with the response?
If you feel I have not fulfilled my obligations, reach out for an explanation. The issue will be reviewed and an additional response will be given. You may also file a grievance with the Data Protection Authority. They will conduct an independent investigation into whether I fulfilled my duties.
Does making a DSAR influence my account status?
No, it does not. Using your data protection rights will not adversely affect your account. I treat access requests neutrally and will not restrict your account, terminate services, or alter loyalty benefits because you asked for data. Openness is essential here, and I urge you to exercise your rights.