Sankra Casino’s Data Subject Access Request

I take the privacy of every Sankra Casino user with utmost care. As a data controller registered in Norway, I process personal information in full alignment with the General Data Protection Regulation and the Norwegian Personal Data Act. A Data Subject Access Request enables you ask me specifically what personal data I store about your account, how it is employed, and who it is disclosed with. This guide describes how to make a DSAR, what to expect, and how I uphold your rights over the course of the process.

Understanding Your Data Subject Access Request

A Data Subject Access Request constitutes a structured mechanism introduced by Article 15 of the GDPR. It provides you the right to receive confirmation that I process personal data about you and to receive a copy of that data. You can also learn why I process it, which categories of data are involved, and the recipients or categories of recipients I disclose it with, such as payment providers and regulatory compliance bodies. The DSAR is a powerful transparency tool.

The scope of a DSAR is intentionally broad sankra.no. It includes all personal information directly or indirectly linked to your Sankra Casino account, including registration details, transaction logs, responsible gaming records, and correspondence. I provide the data in a systematic, commonly used machine-readable format such as JSON or CSV, unless you ask for a simple document.

Which Details You Will Receive

Groups of Personal Data I Maintain

My response to your DSAR contains a detailed overview of the personal data I hold. This normally encompasses identity data, contact details, account transaction history, deposit and withdrawal records, responsible gambling markers, communication logs with support, and any documents you uploaded for KYC purposes. I also reveal if automated decision-making is used, such as risk profiling.

Structure and Provision of Your Data

I furnish the requested data in a portable electronic format, typically a password-protected PDF or a machine-readable CSV file. If you choose a printed copy sent by secure post, I can arrange that upon request. The response also contains an explanatory cover letter that connects each piece of data to the processing purpose and the legal basis, making the information easy to understand.

Your individual Legal Rights Under GDPR and Norwegian Law

The Access Right Per Article 15

Article 15 of the GDPR, enforced in Norway via the Personal Data Act, provides every data subject the entitlement to request access to their personal data. I have to confirm whether processing is happening, furnish a copy of the data, and inform you of the objectives, categories, retention periods, and your associated rights. This legal foundation ensures you keep in control of your information while I preserve complete transparency.

Extra Rights Which Back Your Access

In addition to access, you possess the authority to rectification, erasure, restriction of processing, and data portability. If you believe your data is inaccurate or partial, you can ask me to correct it. Under certain conditions you can also request deletion. I reference these because a DSAR is frequently the first step before applying other rights. Being aware of the full scope assists you submit precise requests.

Identity Confirmation and Protection

Why I Need to Confirm Your Identity

Prior to disclosing any personal data, I must be sure I am communicating with the real data subject. This precaution prevents unauthorized entry and identity fraud. GDPR requires me to take reasonable steps to verify your identity, especially when sensitive information is involved. I thus ask for supporting documents, but I process them securely and delete the verification data as soon as the process ends.

Valid Documents for Verification

You can confirm your identity by sending a clear copy of a valid passport, national ID card, or driving licence. If your account details have changed, I may also require a recent utility bill showing your registered address. Please obscure unnecessary sensitive information such as passport numbers. I only request the photograph and full name for verification. Digital copies sent through encrypted email are ideal.

How to Submit a DSAR to Sankra Casino

Required Information for a Valid Request

To complete your request quickly, I need specific identification details. Give your full name, the email address registered to your Sankra Casino account, and your username or account number. Specify the specific data you want to access. A general request is valid, but specifying it speeds up the process. Mention if you need the reply in a particular language or format.

Submission Channels and Address

Submit your DSAR by email to our dedicated Data Protection Officer at dataprotection@sankra.no. As an option, you can mail a signed written request to Sankra Casino’s registered address in Norway. I recommend using email for speed and security. All incoming DSARs are logged and acknowledged within two business days.

Answer Timeframes and Possible Limitations

Under GDPR, I am required to answer your DSAR promptly, and at the latest within a month of obtaining the confirmed request. If your request is complex or you submit multiple requests, I may extend this period by up to two additional months. I will inform you of any prolongation within the first month, together with the grounds for the delay, so you are never in doubt.

Specific circumstances may block full divulgence, for example if disclosing the data would harm others’ rights or disclose confidential business information. In such cases I censor or reject the affected portion. I give the first response at no cost, but if you make manifestly unfounded or unreasonable requests, I may impose a cost or refuse to respond, always explaining the reason and your right to lodge a complaint to the Datatilsynet.

FAQ

Is it possible to ask for data about someone else, like a family member?

Information is released solely to the person it relates to. Due to privacy safeguards, I cannot disclose information about a third party, even a family member. If you have legal authority like a power of attorney, provide that documentation. If not, the other person must submit their own DSAR.

What if I have forgotten my registered email address?

If you misplaced your email, reach out to support providing your full name, date of birth, and registered mailing address or phone number. I can verify your identity and recover account details, then process the DSAR. This could take a few extra days, but I will update you on progress.

For how long is my data retained after account closure?

I hold personal data for the period stipulated by Norwegian anti-money laundering laws, generally five years after account closure. Once retention ends, data is securely destroyed unless a longer timeframe is legally required or needed for legal disputes. Detailed retention periods appear in my privacy notice.

Is it possible to obtain a copy of data from my closed account?

Certainly. Your right to access persists even after your Sankra Casino account is closed. You may file a DSAR for the information I still retain. The process is the same: provide identification and specify the information you need. The archived data will be retrieved and provided within the same legal deadline.

What if I am not satisfied with the response?

If you believe I have not complied, contact me for clarification. I will review the matter and provide a supplementary reply. Additionally, you are entitled to lodge a complaint with the Data Protection Authority. They will conduct an independent investigation into whether I fulfilled my duties.

Does submitting a DSAR affect my account status?

No, it does not. Exercising your data protection rights has no negative impact on your account. I process access requests without bias and will not limit your account, end services, or modify loyalty perks due to your data request. Clarity is key, and I encourage you to make use of your entitlements.