I handle the privacy of every Sankra Casino user with utmost care https://sankra.no/legal-and-affiliates/. As a data controller based in Norway, I handle personal information in full alignment with the General Data Protection Regulation and the Norwegian Personal Data Act. A Data Subject Access Request lets you inquire me exactly what personal data I store about your account, how it is utilized, and who it is transmitted with. This guide explains how to submit a DSAR, what to anticipate, and how I protect your rights over the course of the process.

Understanding Your Data Subject Access Request

A Data Subject Access Request represents a structured mechanism created by Article 15 of the GDPR. It provides you the right to obtain confirmation that I handle personal data about you and to obtain a copy of that data. You can also discover why I manage it, which categories of data are relevant, and the recipients or categories of recipients I share it with, such as payment providers and regulatory compliance bodies. The DSAR is a strong transparency tool.

The scope of a DSAR is deliberately broad. It includes all personal information directly or indirectly linked to your Sankra Casino account, including registration details, transaction logs, responsible gaming records, and correspondence. I provide the data in a systematic, commonly used machine-readable format such as JSON or CSV, unless you request for a simple document.

Method for Submit a DSAR to Sankra Casino

Required Information for a Valid Request

To complete your request quickly, I need clear identification details. Give your full name, the email address registered to your Sankra Casino account, and your username or account number. Specify the specific data you want to access. A general request is valid, but narrowing it down speeds up the process. Indicate if you need the reply in a particular language or format.

Submission Channels and Address

Forward your DSAR by email to our dedicated Data Protection Officer at dataprotection@sankra.no. Alternatively, you can mail a signed written request to Sankra Casino’s registered address in Norway. I advise using email for speed and security. All incoming DSARs are logged and acknowledged within two business days.

Identity Verification and Security

Why I Must Verify Your Identity

Before sharing any personal data, I must be certain I am communicating with the real data subject. This precaution prevents illegal access and identity fraud. GDPR requires me to take reasonable steps to verify your identity, notably when sensitive information is involved. I consequently ask for supporting documents, but I handle them securely and remove the verification data as soon as the process finishes.

Valid Documents for Verification

You can authenticate your identity by sending a clear copy of a valid passport, national ID card, or driving licence. If your account details have changed, I may also request a recent utility bill showing your registered address. Please redact unnecessary sensitive information such as passport numbers. I only need the photograph and full name for verification. Digital copies sent through encrypted email are preferred.

Response Timelines and Possible Limitations

Under GDPR, I am required to answer your DSAR without undue delay, and at the latest within a month of getting the confirmed request. If your request is intricate or you make multiple requests, I may prolong this period by up to two further months. I will inform you of any delay within the first month, together with the reasons for the delay, so you are always kept informed.

Specific circumstances may prevent full release, for example if releasing the data would infringe others’ rights or disclose confidential business details. In such cases I edit or reject the relevant portion. I offer the first response free of charge, but if you make obviously groundless or excessive requests, I may levy a charge or decline to act, always clarifying the reason and your right to file a complaint to the Datatilsynet.

What Information You Shall Get

Types of Personal Data I Hold

My reply to your DSAR contains a detailed summary of the personal data I keep. This normally covers identity data, contact details, account transaction history, deposit and withdrawal records, responsible gambling markers, communication logs with support, and any documents you uploaded for KYC purposes. I also indicate if automated decision-making is used, such as risk profiling.

Structure and Provision of Your Data

I supply the requested data in a portable electronic format, typically a password-protected PDF or a machine-readable CSV file. If you prefer a printed copy sent by secure post, I can organize that upon request. The response also contains an explanatory cover letter that links each piece of data to the processing purpose and the legal basis, making the information easy to understand.

Your personal Legal Rights Per GDPR and Norwegian Law

The Access Right Under Article 15

Article 15 of the GDPR, implemented in Norway by means of the Personal Data Act, provides every data subject the right to demand access to their personal data. I am required to confirm whether processing occurs, provide a copy of the data, and notify you of the objectives, categories, retention periods, and your associated rights. This legal foundation secures you keep in control of your information while I maintain complete transparency.

Further Rights That Support Your Access

Beyond access, you hold the entitlement to rectification, erasure, restriction of processing, and data portability. If you suspect your data is incorrect or incomplete, you can tell me to correct it. Under certain situations you can also request deletion. I reference these because a DSAR is commonly the first step before using other rights. Being aware of the full scope helps you submit precise requests.

Frequently Asked Questions

Can I request data about another person, such as a relative?

I can only disclose data to the person it concerns. To safeguard privacy, I cannot provide details about another person, including a relative. If you hold legal standing like a power of attorney, furnish that documentation. Otherwise, the third party needs to file their own DSAR.

What should I do if I lost my registered email address?

If you lost your email, contact support with full name, date of birth, and registered postal address or phone. I am able to authenticate your identity and restore account information, then handle the DSAR. This could take a few extra days, but I will update you on progress.

What is the data retention period after I close my account?

Personal data is kept for the duration mandated by Norwegian anti-money laundering regulations, usually five years following closure. Following the retention period, data is safely erased unless a longer duration is required by law or necessary for legal proceedings. Detailed retention periods appear in my privacy notice.

Is it possible to obtain a copy of data from my closed account?

Yes. Your right to access persists even after your Sankra Casino account is closed. A DSAR can be submitted for the data I continue to keep. The steps are unchanged: present identification and state the information you seek. The archived data will be retrieved and provided within the same legal deadline.

What if I am not satisfied with the response?

Should you think I have not adhered to requirements, get in touch for clarification. I will review the matter and provide a supplementary reply. You may also file a grievance with the Data Protection Authority. They will independently investigate whether I met my obligations.

Does making a DSAR influence my account status?

No. Using your data protection rights will not adversely affect your account. Access requests are handled impartially, and your account will not be limited, services terminated, or loyalty rewards changed because you requested information. Clarity is key, and I encourage you to make use of your entitlements.