I treat the privacy of every Sankra Casino user with high priority https://sankra.no/legal-and-affiliates/. As a data controller registered in Norway, I process personal information in full compliance with the General Data Protection Regulation and the Norwegian Personal Data Act. A Data Subject Access Request allows you ask me specifically what personal data I hold about your account, how it is employed, and who it is transmitted with. This guide outlines how to make a DSAR, what to expect, and how I uphold your rights over the course of the process.
Steps to Submit a DSAR to Sankra Casino
Necessary Information for a Valid Request
To complete your request quickly, I need clear identification details. Provide your full name, the email address registered to your Sankra Casino account, and your username or account number. Specify the specific data you want to access. A general request is valid, but focusing it speeds up the process. Mention if you need the reply in a particular language or format.
Submission Channels and Address
Submit your DSAR by email to our dedicated Data Protection Officer at dataprotection@sankra.no. Otherwise, you can mail a signed written request to Sankra Casino’s registered address in Norway. I suggest using email for speed and security. All incoming DSARs are logged and acknowledged within two business days.
Your Legal Rights Pursuant to GDPR and Norwegian Law
The Entitlement to Access Per Article 15
Article 15 of the GDPR, implemented in Norway via the Personal Data Act, grants every data subject the right to demand access to their personal data. I must confirm whether processing is happening, provide a copy of the data, and advise you of the aims, categories, retention periods, and your associated rights. This legal foundation secures you keep in control of your information while I maintain complete transparency.
Extra Rights That Underpin Your Access
Beyond access, you hold the right to rectification, erasure, restriction of processing, and data portability. If you believe your data is incorrect or partial, you can request me to rectify it. Under certain situations you can also demand deletion. I mention these because a DSAR is frequently the first step before applying other rights. Knowing the full scope aids you submit precise requests.
Comprehending Your Data Subject Access Request
A Data Subject Access Request represents a structured mechanism established by Article 15 of the GDPR. It provides you the right to obtain confirmation that I manage personal data about you and to obtain a copy of that data. You can also find out why I process it, which categories of data are involved, and the recipients or categories of recipients I disclose it with, such as payment providers and regulatory compliance bodies. The DSAR is a effective transparency tool.
The scope of a DSAR is purposefully broad. It includes all personal information directly or indirectly linked to your Sankra Casino account, including registration details, transaction logs, responsible gaming records, and correspondence. I deliver the data in a systematic, commonly used machine-readable format such as JSON or CSV, unless you specify for a simple document.
Reply Deadlines and Applicable Constraints
Under GDPR, I am required to answer your DSAR without unnecessary delay, and at the latest within a month of obtaining the verified request. If your request is complicated or you make multiple requests, I may lengthen this period by up to two additional months. I will inform you of any delay within the first month, together with the justifications for the delay, so you are always kept informed.
Specific circumstances may block full disclosure, for example if sharing the data would infringe others’ rights or disclose confidential business information. In such cases I edit or refuse the impacted portion. I offer the first response at no cost, but if you make obviously groundless or excessive requests, I may levy a charge or decline to act, always explaining the reason and your right to complain to the Datatilsynet.
Frequently Asked Questions
Is it possible to ask for data about someone else, like a family member?
Information is released solely to the person it relates to. Due to privacy safeguards, I cannot disclose information about a third party, even a family member. If you have legal authority like a power of attorney, provide that documentation. If not, the other person must submit their own DSAR.
What if I have forgotten my registered email address?
In case you forgot your email, contact support with your complete name, date of birth, and registered home address or telephone. I can verify your identity and recover account details, then process the DSAR. This might cause a short delay, but I will notify you throughout.
What is the data retention period after I close my account?
Personal data is kept for the duration mandated by Norwegian anti-money laundering regulations, usually five years following closure. After retention, data is securely deleted unless a longer period is legally mandated or needed for legal claims. Full retention schedules are available in my privacy notice.
Is it possible to obtain a copy of data from my closed account?
Certainly. Even after you close your Sankra Casino account, your right of access remains. You may file a DSAR for the information I still retain. The steps are unchanged: present identification and state the information you seek. The archived data will be retrieved and provided within the same legal deadline.
What happens if I am unhappy with the reply?
If you feel I have not fulfilled my obligations, reach out for an explanation. I will review the matter and provide a supplementary reply. You also have the right to complain to the Data Protection Authority. They will conduct an independent investigation into whether I fulfilled my duties.
Will filing a DSAR impact my account standing?
No, it does not. Exercising your data protection rights has no negative impact on your account. Access requests are handled impartially, and your account will not be limited, services terminated, or loyalty rewards changed because you requested information. Transparency is fundamental here, and I encourage you to use your rights.
What Information You Will Receive
Groups of Personal Data I Store
My response to your DSAR contains a thorough summary of the personal data I store. This normally covers identity data, contact details, account transaction history, deposit and withdrawal records, responsible gambling markers, communication logs with support, and any documents you uploaded for KYC purposes. I also reveal if automated decision-making is used, such as risk profiling.
Format and Transmission of Your Data
I provide the requested data in a portable electronic format, typically a password-protected PDF or a machine-readable CSV file. If you choose a printed copy sent by secure post, I can organize that upon request. The response also contains an explanatory cover letter that connects each piece of data to the processing purpose and the legal basis, making the information easy to understand.
Identity Confirmation and Protection
Why I Need to Confirm Your Identity
Before sharing any personal data, I must be certain I am communicating with the genuine data subject. This precaution prevents unauthorized entry and identity fraud. GDPR obliges me to take suitable steps to verify your identity, especially when sensitive information is involved. I therefore ask for supporting documents, but I handle them securely and remove the verification data as soon as the process ends.
Approved Documents for Verification
You can confirm your identity by submitting a clear copy of a valid passport, national ID card, or driving licence. If your account details have changed, I may also require a recent utility bill showing your registered address. Please redact unnecessary sensitive information such as passport numbers. I only require the photograph and full name for verification. Digital copies sent through encrypted email are recommended.