I treat the protection of every Sankra Casino user with high priority. As a data controller established in Norway, I handle personal information in full accordance with the General Data Protection Regulation and the Norwegian Personal Data Act. A Data Subject Access Request allows you ask me specifically what personal data I hold about your account, how it is employed, and who it is shared with. This guide describes how to make a DSAR, what to anticipate, and how I safeguard your rights throughout the process.
Understanding Your Data Subject Access Request
A Data Subject Access Request represents a formal mechanism created by Article 15 of the GDPR. It grants you the right to receive confirmation that I manage personal data about you and to obtain a copy of that data. You can also find out why I process it, which categories of data are involved, and the recipients or categories of recipients I transmit it with, such as payment providers and regulatory compliance bodies. The DSAR is a powerful transparency tool.
The scope of a DSAR is deliberately broad. It encompasses all personal information directly or indirectly associated to your Sankra Casino account, including registration details, transaction logs, responsible gaming records, and correspondence. I supply the data in a organized, commonly used machine-readable format such as JSON or CSV, unless you request for a simple document.
How to Submit a DSAR to Sankra Casino
Required Information for a Valid Request
To complete your request efficiently, I need clear identification details. Provide your full name, the email address registered to your Sankra Casino account, and your username or account number. Describe the specific data you want to access. A general request is valid, but specifying it speeds up the process. Indicate if you need the reply in a particular language or format.
Communication Channels and Address
Forward your DSAR by email to our dedicated Data Protection Officer at dataprotection@sankra.no. As an option, you can mail a signed written request to Sankra Casino’s registered address in Norway. I advise using email for speed and security. All incoming DSARs are logged and acknowledged within two business days.
What Information You Will Receive
Categories of Personal Data I Hold
My reply to your DSAR contains a detailed overview of the personal data I keep https://sankra.no/legal-and-affiliates. This usually encompasses identity data, contact details, account transaction history, deposit and withdrawal records, responsible gambling markers, communication logs with support, and any documents you uploaded for KYC purposes. I also indicate if automated decision-making is used, such as risk profiling.
Layout and Provision of Your Data
I provide the requested data in a portable electronic format, typically a password-protected PDF or a machine-readable CSV file. If you would rather a printed copy sent by secure post, I can arrange that upon request. The response also includes an explanatory cover letter that maps each piece of data to the processing purpose and the legal basis, making the information easy to understand.
Identity Confirmation and Security
Why I Need to Confirm Your Identity
Prior to disclosing any personal data, I must be certain I am communicating with the genuine data subject. This safeguard prevents unauthorised access and identity fraud. GDPR requires me to take reasonable steps to verify your identity, notably when sensitive information is involved. I consequently ask for supporting documents, but I process them securely and erase the verification data as soon as the process ends.
Valid Documents for Verification
You can verify your identity by providing a clear copy of a valid passport, national ID card, or driving licence. If your account details have changed, I may also require a recent utility bill showing your registered address. Please redact unnecessary sensitive information such as passport numbers. I only request the photograph and full name for verification. Digital copies sent through encrypted email are recommended.
Your personal Legal Rights Pursuant to GDPR and Norwegian Law
The Access Right Pursuant to Article 15
Article 15 of the GDPR, implemented in Norway by means of the Personal Data Act, provides every data subject the right to request access to their personal data. I must confirm whether processing takes place, supply a copy of the data, and inform you of the purposes, categories, retention periods, and your associated rights. This legal foundation ensures you remain in control of your information while I preserve complete transparency.
Further Rights Which Back Your Access
In addition to access, you have the right to rectification, erasure, restriction of processing, and data portability. If you believe your data is incorrect or incomplete, you can request me to correct it. Under certain conditions you can also ask for deletion. I reference these because a DSAR is often the first step before exercising other rights. Being aware of the full scope assists you submit precise requests.
Reply Deadlines and Potential Restrictions
Under GDPR, I must respond to your DSAR without unnecessary delay, and at the latest within 30 days of getting the confirmed request. If your request is complicated or you submit multiple requests, I may prolong this period by up to two further months. I will inform you of any extension within the first month, together with the justifications for the delay, so you are never in doubt.
Restricted circumstances may block full disclosure, for example if sharing the data would violate others’ rights or disclose confidential business details. In such cases I edit or deny the impacted portion. I offer the first response free of charge, but if you make clearly baseless or excessive requests, I may impose a cost or decline to act, always explaining the reason and your right to file a complaint to the Datatilsynet.
FAQ
Can I request data about another person, such as a relative?
Information is released solely to the person it relates to. For privacy protection, I will not release information about someone else, even a relative. If you have legal authority like a power of attorney, provide that documentation. If not, the other person must submit their own DSAR.
What if I have forgotten my registered email address?
If you lost your email, contact support with full name, date of birth, and registered postal address or phone. Your identity can be confirmed and account information retrieved, after which the DSAR will be processed. This could take a few extra days, but I will update you on progress.
What is the data retention period after I close my account?
I retain personal data as long as required by Norwegian anti-money laundering rules, typically five years after closure. After retention, data is securely deleted unless a longer period is legally mandated or needed for legal claims. Specific retention timelines are outlined in my privacy policy.
Can I get a copy of my closed account data?
Absolutely. Even after you close your Sankra Casino account, your right of access remains. You can submit a DSAR for the data I still hold. The steps are unchanged: present identification and state the information you seek. The archived data will be retrieved and provided within the same legal deadline.
What happens if I am unhappy with the reply?
If you feel I have not fulfilled my obligations, reach out for an explanation. The issue will be reviewed and an additional response will be given. Additionally, you are entitled to lodge a complaint with the Data Protection Authority. They will conduct an independent investigation into whether I fulfilled my duties.
Does submitting a DSAR affect my account status?
No. Using your data protection rights will not adversely affect your account. Access requests are handled impartially, and your account will not be limited, services terminated, or loyalty rewards changed because you requested information. Clarity is key, and I encourage you to make use of your entitlements.
