Sankra Casino’s Data Subject Access Request

I take the protection of every Sankra Casino user with high priority. As a data controller established in Norway, I handle personal information in full accordance with the General Data Protection Regulation and the Norwegian Personal Data Act. A Data Subject Access Request lets you ask me precisely what personal data I hold about your account, how it is utilized, and who it is disclosed with. This guide explains how to submit a DSAR, what to anticipate, and how I protect your rights throughout the process.

Understanding Your Data Subject Access Request

A Data Subject Access Request is a structured mechanism created by Article 15 of the GDPR. It grants you the right to receive confirmation that I process personal data about you and to get a copy of that data. You can also discover why I process it, which categories of data are involved, and the recipients or categories of recipients I transmit it with, such as payment providers and regulatory compliance bodies. The DSAR is a strong transparency tool.

The scope of a DSAR is purposefully broad. It covers all personal information directly or indirectly associated to your Sankra Casino account, including registration details, transaction logs, responsible gaming records, and correspondence. I supply the data in a structured, commonly used machine-readable format such as JSON or CSV, unless you request for a simple document.

Your individual Legal Rights Per GDPR and Norwegian Law

The Access Right Under Article 15

Article 15 of the GDPR, implemented in Norway via the Personal Data Act, gives every data subject the entitlement to request access to their personal data. I am required to confirm whether processing takes place, provide a copy of the data, and inform you of the objectives, categories, retention periods, and your associated rights. This legal foundation secures you stay in control of your information while I preserve complete transparency.

Further Rights Which Back Your Access

Beyond access, you possess the entitlement to rectification, erasure, restriction of processing, and data portability. If you suspect your data is wrong or not full, you can ask me to correct it. Under certain conditions you can also ask for deletion. I note these because a DSAR is frequently the first step before exercising other rights. Understanding the full scope aids you submit precise requests.

Steps to Submit a DSAR to Sankra Casino

Essential Information for a Valid Request

To complete your request efficiently, I need specific identification details. Supply your full name, the email address registered to your Sankra Casino account, and your username or account number. Specify the specific data you want to access. A general request is valid, but specifying it speeds up the process. State if you need the reply in a particular language or format.

Communication Channels and Address

Send your DSAR by email to our dedicated Data Protection Officer at dataprotection@sankra.no. Otherwise, you can mail a signed written request to Sankra Casino’s registered address in Norway. I advise using email for speed and security. All incoming DSARs are logged and acknowledged within two business days.

Response Timelines and Possible Limitations

Under GDPR, I must respond to your DSAR without unnecessary delay, and at the latest within a month of obtaining the confirmed request. If your request is complicated or you submit multiple requests, I may prolong this period by up to two additional months. I will inform you of any extension within the first month, together with the grounds for the delay, so you are never in doubt.

Specific circumstances may prevent full release, for example if disclosing the data would harm others’ rights or expose confidential business information. In such cases I censor or reject the relevant portion. I provide the first response free of charge, but if you make clearly baseless or disproportionate requests, I may impose a cost or refuse to respond, always clarifying the reason and your right to complain to the Datatilsynet.

Identity Verification and Protection

Why I Need to Confirm Your Identity

Prior to disclosing any personal data, I must be sure I am communicating with the actual data subject. This safeguard prevents illegal access and identity fraud. GDPR mandates me to take reasonable steps to verify your identity, especially when sensitive information is involved. I consequently ask for supporting documents, but I manage them securely and delete the verification data as soon as the process ends.

Valid Documents for Verification

You can confirm your identity by sending a clear copy of a valid passport, national ID card, or driving licence. If your account details have changed, I may also request a recent utility bill showing your registered address. Please remove unnecessary sensitive information such as passport numbers. I only request the photograph and full name for verification. Digital copies sent through encrypted email are ideal.

What Information You Will Receive

Types of Personal Data I Maintain

My reply to your DSAR includes a thorough summary of the personal data I hold. This normally includes identity data, contact details, account transaction history, deposit and withdrawal records, responsible gambling markers, communication logs with support, and any documents you uploaded for KYC purposes. I also indicate if automated decision-making is used, such as risk profiling.

Format and Provision of Your Data

I provide the requested data in a portable electronic format, casino sankra lisensinformasjon, typically a password-protected PDF or a machine-readable CSV file. If you prefer a printed copy sent by secure post, I can set up that upon request. The response also contains an explanatory cover letter that connects each piece of data to the processing purpose and the legal basis, making the information easy to understand.

FAQ

May I request information about another individual, for example a relative?

Data is only shared with the individual it bfmtv.com pertains to. To safeguard privacy, I cannot provide details about another person, including a relative. If you hold legal standing like a power of attorney, furnish that documentation. If not, the other person must submit their own DSAR.

What happens if I cannot recall my registered email?

In case you forgot your email, contact support with your complete name, date of birth, and registered home address or telephone. Your identity can be confirmed and account information retrieved, after which the DSAR will be processed. This might cause a short delay, but I will notify you throughout.

How long do you keep my data after I close my account?

I hold personal data for the period stipulated by Norwegian anti-money laundering laws, generally five years after account closure. Once retention ends, data is securely destroyed unless a longer timeframe is legally required or needed for legal disputes. Specific retention timelines are outlined in my privacy policy.

Is it possible to obtain a copy of data from my closed account?

Certainly. Even following the closure of your Sankra Casino account, your access rights continue. A DSAR can be submitted for the data I continue to keep. The process is the same: provide identification and specify the information you need. I will find the stored records and deliver them within the same statutory period.

What happens if I am unhappy with the reply?

Should you think I have not adhered to requirements, get in touch for clarification. I will review the matter and provide a supplementary reply. Additionally, you are entitled to lodge a complaint with the Data Protection Authority. They will independently investigate whether I met my obligations.

Does making a DSAR influence my account status?

No. Asserting your data protection rights carries no negative consequences for your account. I process access requests without bias and will not limit your account, end services, or modify loyalty perks due to your data request. Transparency is fundamental here, and I encourage you to use your rights.