Sankra Casino’s Data Subject Access Request

I treat the confidentiality of every Sankra Casino user with utmost care. As a data controller established in Norway, I manage personal information in full alignment with the General Data Protection Regulation and the Norwegian Personal Data Act. A Data Subject Access Request allows you request me exactly what personal data I maintain about your account, how it is employed, and who it is transmitted with. This guide outlines how to submit a DSAR, what to look forward to, and how I safeguard your rights throughout the process.

Method for Submit a DSAR to Sankra Casino

Essential Information for a Valid Request

To process your request promptly, I need specific identification details. Supply your full name, the email address registered to your Sankra Casino account, and your username or account number. Outline the specific data you want to access. A general request is valid, but specifying it speeds up the process. State if you need the reply in a particular language or format.

Submission Channels and Address

Submit your DSAR by email to our dedicated Data Protection Officer at dataprotection@sankra.no. As an option, you can mail a signed written request to Sankra Casino’s registered address in Norway. I advise using email for speed and security. All incoming DSARs are logged and acknowledged within two business days.

What Data You Will Receive

Categories of Personal Data I Maintain

My answer to your DSAR contains a detailed outline of the personal data I hold. This usually covers identity data, contact details, account transaction history, deposit and withdrawal records, responsible gambling markers, communication logs with support, and any documents you uploaded for KYC purposes. I also indicate if automated decision-making is used, such as risk profiling.

Structure and Delivery of Your Data

I provide the requested data in a portable electronic format, typically a password-protected PDF or a machine-readable CSV file. If you would rather a printed copy sent by secure post, I can arrange that upon request. The response also contains an explanatory cover letter that links each piece of data to the processing purpose and the legal basis, making the information easy to understand.

Comprehending Your Data Subject Access Request

A Data Subject Access Request represents a official mechanism introduced by Article 15 of the GDPR. It provides you the right to receive confirmation that I process personal data about you and to obtain a copy of that data. You can also discover why I manage it, which categories of data are involved, and the recipients or categories of recipients I share it with, such as payment providers and regulatory compliance bodies. The DSAR is a strong transparency tool.

The scope of a DSAR is intentionally broad. It covers all personal information directly or indirectly associated to your Sankra Casino account, including registration details, transaction logs, responsible gaming records, and correspondence. I provide the data in a organized, commonly used machine-readable format such as JSON or CSV, unless you request for a simple document.

Your personal Legal Rights Under GDPR and Norwegian Law

The Right of Access Pursuant to Article 15

Article 15 of the GDPR, applied in Norway via the Personal Data Act, gives every data subject the authority to ask for access to their personal data. I have to confirm whether processing is happening, provide a copy of the data, and advise you of the aims, categories, retention periods, and your connected rights. This legal foundation secures you keep in control of your information while I maintain complete transparency.

Additional Rights That Underpin Your Access

Beyond access, you possess the entitlement to rectification, erasure, restriction of processing, and data portability. If you think your data is inaccurate or incomplete, you can request me to rectify it. Under certain circumstances you can also demand deletion. I note these because a DSAR is frequently the first step before applying other rights. Knowing the full scope aids you formulate precise requests.

Reply Deadlines and Applicable Constraints

Under GDPR, I must respond to your DSAR without undue delay, and at the latest within a month of obtaining the confirmed request. If your request is complex or you make multiple requests, I may prolong this period by up to two additional months. I will notify you of any prolongation within the first month, together with the justifications for the delay, so you are always kept informed.

Restricted circumstances may prevent full disclosure, for example if disclosing the data would infringe others’ rights or expose confidential business details. In such cases I redact or refuse the affected portion. I provide the first response free of charge, but if you make clearly baseless or unreasonable requests, I may levy a charge or decline to act, always explaining the reason and your right to file a complaint to the Datatilsynet.

Identity Verification and Protection

Why I Have to Authenticate Your Identity

Before sharing any personal data, I must be sure I am communicating with the genuine data subject. This precaution prevents unauthorized entry and identity fraud. GDPR requires me to take suitable steps to verify your identity, especially when sensitive information is involved. I therefore ask for supporting documents, but I handle them securely and remove the verification data as soon as the process finishes.

Valid Documents for Verification

You can confirm your identity by submitting a clear copy of a valid passport, national ID card, or driving licence https://sankra.no/legal-and-affiliates/. If your account details have changed, I may also require a recent utility bill showing your registered address. Please obscure unnecessary sensitive information such as passport numbers. I only require the photograph and full name for verification. Digital copies sent through encrypted email are recommended.

FAQ

Can I request data about another person, such as a relative?

I can only disclose data to the person it concerns. For privacy protection, I will not release information about someone else, even a relative. If you have legal authority like a power of attorney, provide that documentation. Otherwise the third party must submit their own DSAR.

What should I do if I lost my registered email address?

If you lost your email, contact support with full name, date of birth, and registered postal address or phone. I am able to authenticate your identity and restore account information, then handle the DSAR. This may add a few days, but I will keep you informed.

For how long is my data retained after account closure?

I retain personal data as long as required by Norwegian anti-money laundering rules, typically five years after closure. Following the retention period, data is safely erased unless a longer duration is required by law or necessary for legal proceedings. Detailed retention periods appear in my privacy notice.

Can I get a copy of my closed account data?

Yes. Your right to access persists even after your Sankra Casino account is closed. You can submit a DSAR for the data I still hold. The procedure is identical: supply identification and indicate the details you require. I will find the stored records and deliver them within the same statutory period.

What should I do if the response does not meet my expectations?

If you believe I have not complied, contact me for clarification. The issue will be reviewed and an additional response will be given. You may also file a grievance with the Data Protection Authority. An independent inquiry will be made to determine if I satisfied my responsibilities.

Does submitting a DSAR affect my account status?

No. Using your data protection rights will not adversely affect your account. I process access requests without bias and will not limit your account, end services, or modify loyalty perks due to your data request. Clarity is key, and I encourage you to make use of your entitlements.