I treat the privacy of every Sankra Casino user seriously https://sankra.no/legal-and-affiliates/. As a data controller based in Norway, I handle personal information in full alignment with the General Data Protection Regulation and the Norwegian Personal Data Act. A Data Subject Access Request enables you request me precisely what personal data I hold about your account, how it is utilized, and who it is shared with. This guide describes how to file a DSAR, what to expect, and how I uphold your rights throughout the process.
Understanding Your Data Subject Access Request
A Data Subject Access Request represents a structured mechanism introduced by Article 15 of the GDPR. It grants you the right to obtain confirmation that I process personal data about you and to get a copy of that data. You can also discover why I process it, which categories of data are involved, and the recipients or categories of recipients I disclose it with, such as payment providers and regulatory compliance bodies. The DSAR is a powerful transparency tool.
The scope of a DSAR is intentionally broad. It covers all personal information directly or indirectly connected to your Sankra Casino account, including registration details, transaction logs, responsible gaming records, and correspondence. I provide the data in a systematic, commonly used machine-readable format such as JSON or CSV, unless you ask for a simple document.
What Data You Shall Get
Types of Personal Data I Hold
My reply to your DSAR provides a comprehensive summary of the personal data I hold. This usually encompasses identity data, contact details, account transaction history, deposit and withdrawal records, responsible gambling markers, communication logs with support, and any documents you uploaded for KYC purposes. I also reveal if automated decision-making is used, such as risk profiling.
Format and Provision of Your Data
I furnish the requested data in a portable electronic format, typically a password-protected PDF or a machine-readable CSV file. If you choose a printed copy sent by secure post, I can organize that upon request. The response also features an explanatory cover letter that links each piece of data to the processing purpose and the legal basis, making the information easy to understand.
Your personal Legal Rights Under GDPR and Norwegian Law
The Entitlement to Access Per Article 15
Article 15 of the GDPR, applied in Norway via the Personal Data Act, provides every data subject the right to ask for access to their personal data. I have to confirm whether processing takes place, supply a copy of the data, and advise you of the objectives, categories, retention periods, and your associated rights. This legal foundation secures you remain in control of your information while I uphold complete transparency.
Extra Rights Which Back Your Access
Beyond access, you have the authority to rectification, erasure, restriction of processing, and data portability. If you think your data is inaccurate or partial, you can tell me to fix it. Under certain situations you laws-lois.justice.gc.ca can also request deletion. I note these because a DSAR is commonly the first step before exercising other rights. Knowing the full scope aids you make precise requests.
Identity Authentication and Safety
Why I Need to Confirm Your Identity
Before releasing any personal data, I must be sure I am communicating with the actual data subject. This precaution prevents illegal access and identity fraud. GDPR obliges me to take reasonable steps to verify your identity, especially when sensitive information is involved. I consequently ask for supporting documents, but I manage them securely and remove the verification data as soon as the process finishes.
Approved Documents for Verification
You can authenticate your identity by sending a clear copy of a valid passport, national ID card, or driving licence. If your account details have changed, I may also ask for a recent utility bill showing your registered address. Please redact unnecessary sensitive information such as passport numbers. I only need the photograph and full name for verification. Digital copies sent through encrypted email are preferred.
Method for Submit a DSAR to Sankra Casino
Required Information for a Valid Request
To handle your request efficiently, I need clear identification details. Give your full name, the email address registered to your Sankra Casino account, and your username or account number. Specify the specific data you want to access. A general request is valid, but specifying it speeds up the process. Indicate if you need the reply in a particular language or format.
Communication Channels and Address
Send your DSAR by email to our dedicated Data Protection Officer at dataprotection@sankra.no. As an option, you can mail a signed written request to Sankra Casino’s registered address in Norway. I recommend using email for speed and security. All incoming DSARs are logged and acknowledged within two business days.
Response Timelines and Potential Restrictions
Under GDPR, I am required to answer your DSAR without undue delay, and at the latest within one month of receiving the authenticated request. If your request is complex or you file multiple requests, I may lengthen this period by up to two extra months. I will advise you of any delay within the first month, together with the reasons for the delay, so you are never in doubt.
Limited circumstances may prevent full release, for example if releasing the data would violate others’ rights or expose confidential business details. In such cases I censor or refuse the relevant portion. I give the first response free of charge, but if you make obviously groundless or unreasonable requests, I may charge a fee or refuse to respond, always explaining the reason and your right to file a complaint to the Datatilsynet.
Frequently Asked Questions
Is it possible to ask for data about someone else, like a family member?
Information is released solely to the person it relates to. Due to privacy safeguards, I cannot disclose information about a third party, even a family member. Should you possess legal authority such as a power of attorney, please submit that paperwork. Otherwise, the third party needs to file their own DSAR.
What happens if I cannot recall my registered email?
If you lost your email, contact support with full name, date of birth, and registered postal address or phone. I am able to authenticate your identity and restore account information, then handle the DSAR. This could take a few extra days, but I will update you on progress.
What is the data retention period after I close my account?
I retain personal data as long as required by Norwegian anti-money laundering rules, typically five years after closure. Following the retention period, data is safely erased unless a longer duration is required by law or necessary for legal proceedings. Specific retention timelines are outlined in my privacy policy.
Can I get a copy of my closed account data?
Yes. Even following the closure of your Sankra Casino account, your access rights continue. A DSAR can be submitted for the data I continue to keep. The process is the same: provide identification and specify the information you need. I will find the stored records and deliver them within the same statutory period.
What if I am not satisfied with the response?
If you feel I have not fulfilled my obligations, reach out for an explanation. I will examine the situation and issue a further reply. You also have the right to complain to the Data Protection Authority. An independent inquiry will be made to determine if I satisfied my responsibilities.
Does making a DSAR influence my account status?
No. Exercising your data protection rights has no negative impact on your account. I treat access requests neutrally and will not restrict your account, terminate services, or alter loyalty benefits because you asked for data. Clarity is key, and I encourage you to make use of your entitlements.
