I handle the privacy of every Sankra Casino user with high priority. As a data controller based in Norway, I process personal information in full accordance with the General Data Protection Regulation and the Norwegian Personal Data Act. A Data Subject Access Request enables you request me exactly what personal data I store about your account, how it is utilized, and who it is disclosed with. This guide explains how to submit a DSAR, what to anticipate, and how I safeguard your rights during the process.

What Data You Will Receive

Categories of Personal Data I Hold

My reply to your DSAR contains a thorough overview of the personal data I store. This typically encompasses identity data, contact details, account transaction history, deposit and withdrawal records, responsible gambling markers, communication reddit.com logs with support, and any documents you uploaded for KYC purposes. I also reveal if automated decision-making is used, such as risk profiling.

Structure and Provision of Your Data

I furnish the requested data in a portable electronic format, typically a password-protected PDF or a machine-readable CSV file. If you would rather a printed copy sent by secure post, I can arrange that upon request. The response also features an explanatory cover letter that maps each piece of data to the processing purpose and the legal basis, making the information easy to understand.

Your individual Legal Rights Under GDPR and Norwegian Law

The Entitlement to Access Pursuant to Article 15

Article 15 of the GDPR, enforced in Norway via the Personal Data Act, provides every data subject the authority to request access to their personal data. I must confirm whether processing is happening, provide a copy of the data, and advise you of the aims, categories, retention periods, and your connected rights. This legal foundation secures you stay in control of your information while I uphold complete transparency.

Additional Rights That Support Your Access

Beyond access, you hold the entitlement to rectification, erasure, restriction of processing, and data portability sankra.no. If you think your data is incorrect or partial, you can request me to fix it. Under certain circumstances you can also request deletion. I reference these because a DSAR is frequently the first step before applying other rights. Understanding the full scope aids you make precise requests.

Identity Confirmation and Security

Why I Must Verify Your Identity

Before sharing any personal data, I must be certain I am communicating with the real data subject. This measure prevents unauthorized entry and identity fraud. GDPR requires me to take suitable steps to verify your identity, especially when sensitive information is involved. I consequently ask for supporting documents, but I handle them securely and delete the verification data as soon as the process finishes.

Valid Documents for Verification

You can authenticate your identity by providing a clear copy of a valid passport, national ID card, or driving licence. If your account details have changed, I may also request a recent utility bill showing your registered address. Please remove unnecessary sensitive information such as passport numbers. I only request the photograph and full name for verification. Digital copies sent through encrypted email are preferred.

How to Submit a DSAR to Sankra Casino

Necessary Information for a Valid Request

To process your request promptly, I need precise identification details. Supply your full name, the email address registered to your Sankra Casino account, and your username or account number. Describe the specific data you want to access. A general request is valid, but narrowing it down speeds up the process. Mention if you need the reply in a particular language or format.

Submission Channels and Address

Send your DSAR by email to our dedicated Data Protection Officer at dataprotection@sankra.no. Otherwise, you can mail a signed written request to Sankra Casino’s registered address in Norway. I recommend using email for speed and security. All incoming DSARs are logged and acknowledged within two business days.

Understanding Your Data Subject Access Request

A Data Subject Access Request is a formal mechanism established by Article 15 of the GDPR. It provides you the right to receive confirmation that I handle personal data about you and to get a copy of that data. You can also learn why I manage it, which categories of data are involved, and the recipients or categories of recipients I disclose it with, such as payment providers and regulatory compliance bodies. The DSAR is a strong transparency tool.

The scope of a DSAR is deliberately broad. It includes all personal information directly or indirectly connected to your Sankra Casino account, including registration details, transaction logs, responsible gaming records, and correspondence. I deliver the data in a structured, commonly used machine-readable format such as JSON or CSV, unless you specify for a simple document.

Response Timelines and Potential Restrictions

Under GDPR, I am required to answer your DSAR without unnecessary delay, and at the latest within a month of receiving the verified request. If your request is complicated or you make multiple requests, I may prolong this period by up to two additional months. I will advise you of any extension within the first month, together with the justifications for the delay, so you are always kept informed.

Restricted circumstances may hinder full disclosure, for example if disclosing the data would infringe others’ rights or expose confidential business data. In such cases I edit or refuse the impacted portion. I offer the first response at no cost, but if you make clearly baseless or disproportionate requests, I may levy a charge or choose not to act, always explaining the reason and your right to complain to the Datatilsynet.

Common Questions

May I request information about another individual, for example a relative?

Data is only shared with the individual it pertains to. For privacy protection, I will not release information about someone else, even a relative. If you hold legal standing like a power of attorney, furnish that documentation. If not, the other person must submit their own DSAR.

What should I do if I lost my registered email address?

If you misplaced your email, reach out to support providing your full name, date of birth, and registered mailing address or phone number. I am able to authenticate your identity and restore account information, then handle the DSAR. This could take a few extra days, but I will update you on progress. get all the details

How long do you keep my data after I close my account?

I retain personal data as long as required by Norwegian anti-money laundering rules, typically five years after closure. Following the retention period, data is safely erased unless a longer duration is required by law or necessary for legal proceedings. Detailed retention periods appear in my privacy notice.

Can I get a copy of my closed account data?

Certainly. Your right to access persists even after your Sankra Casino account is closed. A DSAR can be submitted for the data I continue to keep. The procedure is identical: supply identification and indicate the details you require. The archived data will be retrieved and provided within the same legal deadline.

What should I do if the response does not meet my expectations?

If you believe I have not complied, contact me for clarification. The issue will be reviewed and an additional response will be given. You may also file a grievance with the Data Protection Authority. They will independently investigate whether I met my obligations.

Does submitting a DSAR affect my account status?

No. Exercising your data protection rights has no negative impact on your account. I treat access requests neutrally and will not restrict your account, terminate services, or alter loyalty benefits because you asked for data. Openness is essential here, and I urge you to exercise your rights.