I take the protection of every casino sankra user seriously. As a data controller registered in Norway, I manage personal information in full alignment with the General Data Protection Regulation and the Norwegian Personal Data Act. A Data Subject Access Request lets you ask me exactly what personal data I store about your account, how it is used, and who it is disclosed with. This guide describes how to file a DSAR, what to look forward to, and how I uphold your rights throughout the process.
Understanding Your Data Subject Access Request
A Data Subject Access Request constitutes a structured mechanism introduced by Article 15 of the GDPR. It gives you the right to receive confirmation that I handle personal data about you and to receive a copy of that data. You can also find out why I manage it, which categories of data are included, and the recipients or categories of recipients I share it with, such as payment providers and regulatory compliance bodies. The DSAR is a strong transparency tool.
The scope of a DSAR is purposefully broad. It encompasses all personal information directly or indirectly linked to your Sankra Casino account, including registration details, transaction logs, responsible gaming records, and correspondence. I supply the data in a structured, commonly used machine-readable format such as JSON or CSV, unless you specify for a simple document.
Method for Submit a DSAR to Sankra Casino
Necessary Information for a Valid Request
To handle your request efficiently, I need clear identification details. Give your full name, the email address registered to your Sankra Casino account, and your username or account number. Describe the specific data you want to access. A general request is valid, but narrowing it down speeds up reddit.com the process. State if you need the reply in a particular language or format.
Submission Channels and Address
Submit your DSAR by email to our dedicated Data Protection Officer at dataprotection@sankra.no. Otherwise, you can mail a signed written request to Sankra Casino’s registered address in Norway. I recommend using email for speed and security. All incoming DSARs are logged and acknowledged within two business days.
Identity Confirmation and Security
Why I Have to Authenticate Your Identity
Before releasing any personal data, I must be certain I am communicating with the actual data subject. This measure prevents unauthorized entry and identity fraud. GDPR mandates me to take suitable steps to verify your identity, especially when sensitive information is involved. I therefore ask for supporting documents, but I handle them securely and erase the verification data as soon as the process completes.
Accepted Documents for Verification
You can authenticate your identity by submitting a clear copy of a valid passport, national ID card, or driving licence. If your account details have changed, I may also request a recent utility bill showing your registered address. Please remove unnecessary sensitive information such as passport numbers. I only require the photograph and full name for verification. Digital copies sent through encrypted email are ideal.
Your Legal Rights Pursuant to GDPR and Norwegian Law
The Entitlement to Access Per Article 15
Article 15 of the GDPR, implemented in Norway by means of the Personal Data Act, grants every data subject the right to ask for access to their personal data. I have to confirm whether processing takes place, furnish a copy of the data, and advise you of the objectives, categories, retention periods, and your associated rights. This legal foundation ensures you remain in control of your information while I preserve complete transparency.
Extra Rights That Underpin Your Access
Beyond access, you hold the entitlement to rectification, erasure, restriction of processing, and data portability. If you believe your data is incorrect or not full, you can ask me to fix it. Under certain conditions you can also ask for deletion. I note these because a DSAR is often the first step before using other rights. Understanding the full scope helps you formulate precise requests.
What Information You Shall Get
Groups of Personal Data I Maintain
My reply to your DSAR provides a detailed overview of the personal data I keep. This typically encompasses identity data, contact details, account transaction history, deposit and withdrawal records, responsible gambling markers, communication logs with support, and any documents you uploaded for KYC purposes. I also disclose if automated decision-making is used, such as risk profiling.
Layout and Transmission of Your Data
I provide the requested data in a portable electronic format, typically a password-protected PDF or a machine-readable CSV file. If you would rather a printed copy sent by secure post, I can arrange that upon request. The response also contains an explanatory cover letter that maps each piece of data to the processing purpose and the legal basis, making the information easy to understand.
Answer Timeframes and Potential Restrictions
Under GDPR, I am required to answer your DSAR without undue delay, and at the latest within one month of obtaining the confirmed request. If your request is intricate or you make multiple requests, I may prolong this period by up to two additional months. I will inform you of any delay within the first month, together with the justifications for the delay, so you are always kept informed.
Restricted circumstances may block full release, for example if disclosing the data would infringe others’ rights or disclose confidential business details. In such cases I edit or reject the relevant portion. I provide the first response at no cost, but if you make obviously groundless or excessive requests, I may charge a fee or decline to act, always clarifying the reason and your right to lodge a complaint to the Datatilsynet.
Common Questions
Is it possible to ask for data about someone else, like a family member?
I can only disclose data to the person it concerns. For privacy protection, I will not release information about someone else, even a relative. If you have legal authority like a power of attorney, provide that documentation. If not, the other person must submit their own DSAR.
What if I have forgotten my registered email address?
If you misplaced your email, reach out to support providing your full name, date of birth, and registered mailing address or phone number. I can verify your identity and recover account details, then process the DSAR. This could take a few extra days, but I will update you on progress.
What is the data retention period after I close my account?
I hold personal data for the period stipulated by Norwegian anti-money laundering laws, generally five years after account closure. Following the retention period, data is safely erased unless a longer duration is required by law or necessary for legal proceedings. Detailed retention periods appear in my privacy notice.
Is it possible to obtain a copy of data from my closed account?
Certainly. Even after you close your Sankra Casino account, your right of access remains. You may file a DSAR for the information I still retain. The steps are unchanged: present identification and state the information you seek. I will find the stored records and deliver them within the same statutory period.
What if I am not satisfied with the response?
If you believe I have not complied, contact me for clarification. I will review the matter and provide a supplementary reply. You may also file a grievance with the Data Protection Authority. They will independently investigate whether I met my obligations.
Does submitting a DSAR affect my account status?
No, it does not. Using your data protection rights will not adversely affect your account. Access requests are handled impartially, and your account will not be limited, services terminated, or loyalty rewards changed because you requested information. Clarity is key, and I encourage you to make use of your entitlements.