I take the protection of every Sankra Casino user with utmost care https://sankra.no/legal-and-affiliates/. As a data controller established in Norway, I manage personal information in full compliance with the General Data Protection Regulation and the Norwegian Personal Data Act. A Data Subject Access Request allows you ask me precisely what personal data I maintain about your account, how it is used, and who it is shared with. This guide explains how to make a DSAR, what to expect, and how I uphold your rights throughout the process.

How to Submit a DSAR to Sankra Casino

Required Information for a Valid Request

To complete your request quickly, I need precise identification details. Provide your full name, the email address registered to your Sankra Casino account, and your username or account number. Describe the specific data you want to access. A general request is valid, but narrowing it down speeds up the process. State if you need the reply in a particular language or format.

Contact Channels and Address

Forward your DSAR by email to our dedicated Data Protection Officer at dataprotection@sankra.no. As an option, you can mail a signed written request to Sankra Casino’s registered address in Norway. I advise using email for speed and security. All incoming DSARs are logged and acknowledged within two business days.

Understanding Your Data Subject Access Request

A Data Subject Access Request constitutes a official mechanism established by Article 15 of the GDPR. It grants you the right to obtain confirmation that I manage personal data about you and to get a copy of that data. You can also learn why I handle it, which categories of data are involved, and the recipients or categories of recipients I share it with, such as payment providers and regulatory compliance bodies. The DSAR is a powerful transparency tool.

The scope of a DSAR is deliberately broad. It covers all personal information directly or indirectly linked to your Sankra Casino account, including registration details, transaction logs, responsible gaming records, and correspondence. I provide the data in a systematic, commonly used machine-readable format such as JSON or CSV, unless you request for a simple document.

Identity Verification and Safety

Why I Must Verify Your Identity

Before releasing any personal data, I must be confident I am communicating with the genuine data subject. This safeguard prevents unauthorised access and identity fraud. GDPR requires me to take appropriate steps to verify your identity, particularly when sensitive information is involved. I thus ask for supporting documents, but I handle them securely and erase the verification data as soon as the process ends.

Accepted Documents for Verification

You can authenticate your identity by sending a clear copy of a valid passport, national ID card, or driving licence. If your account details have changed, I may also require a recent utility bill showing your registered address. Please redact unnecessary sensitive information such as passport numbers. I only require the photograph and full name for verification. Digital copies sent through encrypted email are recommended.

Your Legal Rights Pursuant to GDPR and Norwegian Law

The Entitlement to Access Pursuant to Article 15

Article 15 of the GDPR, implemented in Norway via the Personal Data Act, grants every data subject the entitlement to request access to their personal data. I have to confirm whether processing occurs, furnish a copy of the data, and notify you of the objectives, categories, retention periods, and your associated rights. This legal foundation guarantees you stay in control of your information while I maintain complete transparency.

Additional Rights That Underpin Your Access

In addition to access, you possess the entitlement to rectification, erasure, restriction of processing, and data portability. If you believe your data is wrong or incomplete, you can tell me to correct it. Under certain circumstances you can also ask for deletion. I mention these because a DSAR is often the first step before exercising other rights. Being aware of the full scope assists you submit precise requests.

What Information You Can Expect

Groups of Personal Data I Hold

My response to your DSAR provides a detailed summary of the personal data I store. This normally includes identity data, contact details, account transaction history, deposit and withdrawal records, responsible gambling markers, communication logs with support, and any documents you uploaded for KYC purposes. I also indicate if automated decision-making is used, such as risk profiling.

Format and Transmission of Your Data

I furnish the requested data in a portable electronic format, typically a password-protected PDF or a machine-readable CSV file. If you would rather a printed copy sent by secure post, I can organize that upon request. The response also contains an explanatory bbc.co.uk cover letter that maps each piece of data to the processing purpose and the legal basis, making the information easy to understand.

Frequently Asked Questions

Can I request data about another person, such as a relative?

Information is released solely to the person it relates to. Due to privacy safeguards, I cannot disclose information about a third party, even a family member. If you hold legal standing like a power of attorney, furnish that documentation. If not, the other person must submit their own DSAR.

What if I have forgotten my registered email address?

If you misplaced your email, reach out to support providing your full name, date of birth, and registered mailing address or phone number. Your identity can be confirmed and account information retrieved, after which the DSAR will be processed. This might cause a short delay, but I will notify you throughout.

How long do you keep my data after I close my account?

I hold personal data for the period stipulated by Norwegian anti-money laundering laws, generally five years after account closure. Following the retention period, data is safely erased unless a longer duration is required by law or necessary for legal proceedings. Detailed retention periods appear in my privacy notice.

Is it possible to obtain a copy of data from my closed account?

Yes. Your right to access persists even after your Sankra Casino account is closed. A DSAR can be submitted for the data I continue to keep. The procedure is identical: supply identification and indicate the details you require. I will find the stored records and deliver them within the same statutory period.

What happens if I am unhappy with the reply?

If you feel I have not fulfilled my obligations, reach out for an explanation. The issue will be reviewed and an additional response will be given. You may also file a grievance with the Data Protection Authority. They will independently investigate whether I met my obligations.

Does submitting a DSAR affect my account status?

No, it does not. Exercising your data protection rights has no negative impact on your account. I process access requests without bias and will not limit your account, end services, or modify loyalty perks due to your data request. Openness is essential here, and I urge you to exercise your rights.

Reply Deadlines and Applicable Constraints

Under GDPR, I need to reply to your DSAR without undue delay, and at the latest within 30 days of getting the verified request. If your request is intricate or you file multiple requests, I may prolong this period by up to two further months. browse more I will inform you of any delay within the first month, together with the justifications for the delay, so you are never left wondering.

Restricted circumstances may hinder full divulgence, for example if disclosing the data would harm others’ rights or expose confidential business details. In such cases I redact or reject the affected portion. I give the first response free of charge, but if you make manifestly unfounded or unreasonable requests, I may impose a cost or decline to act, always clarifying the reason and your right to file a complaint to the Datatilsynet.