I handle the protection of every Sankra Casino user with utmost care. As a data controller registered in Norway, I manage personal information in full compliance with the General Data Protection Regulation and the Norwegian Personal Data Act. A Data Subject Access Request enables you request me specifically what personal data I hold about your account, how it is used, and who it is transmitted with. This guide explains how to file a DSAR, what to expect, and how I uphold your rights over the course of the process.
Grasping Your Data Subject Access Request
A Data Subject Access Request represents a formal mechanism established by Article 15 of the GDPR. It provides you the right to obtain confirmation that I manage personal data about you and to obtain a copy of that data. You can also discover why I manage it, which categories of data are relevant, and the recipients or categories of recipients I share it with, such as payment providers and regulatory compliance bodies. The DSAR is a strong transparency tool.
The scope of a DSAR is intentionally broad https://sankra.no/legal-and-affiliates/. It includes all personal information directly or indirectly associated to your Sankra Casino account, including registration details, transaction logs, responsible gaming records, and correspondence. I deliver the data in a systematic, commonly used machine-readable format such as JSON or CSV, unless you request for a simple document.
Your personal Legal Rights Pursuant to GDPR and Norwegian Law
The Right of Access Pursuant to Article 15
Article 15 of the GDPR, enforced in Norway via the Personal Data Act, provides every data subject the entitlement to ask for access to their personal data. I must confirm whether processing takes place, provide a copy of the data, and notify you of the purposes, categories, retention periods, and your associated rights. This legal foundation ensures you keep in control of your information while I preserve complete transparency.
Further Rights That Support Your Access
Aside from access, you have the entitlement to rectification, erasure, restriction of processing, and data portability. If you think your data is incorrect or partial, you can request me to fix it. Under certain situations you can also ask for deletion. I reference these because a DSAR is often the first step before exercising other rights. Being aware of the full scope assists you formulate precise requests.
Identity Authentication and Protection
Why I Need to Confirm Your Identity
Before releasing any personal data, I must be confident I am communicating with the genuine data subject. This safeguard prevents illegal access and identity fraud. GDPR mandates me to take appropriate steps to verify your identity, especially when sensitive information is involved. I therefore ask for supporting documents, but I handle them securely and remove the verification data as soon as the process ends.
Valid Documents for Verification
You can verify your identity by providing a clear copy of a valid passport, national ID card, or driving licence. If your account details have changed, I may also require a recent utility bill showing your registered address. Please remove unnecessary sensitive information such as passport numbers. I only need the photograph and full name for verification. Digital copies sent through encrypted email are recommended.
Which Details You Shall Get
Categories of Personal Data I Maintain
My response to your DSAR contains a detailed summary of the personal data I keep. This normally covers identity data, contact details, account transaction history, deposit and withdrawal records, responsible gambling markers, communication logs with support, and any documents you uploaded for KYC purposes. I also disclose if automated decision-making is used, such as risk profiling.
Format and Provision of Your Data
I supply the requested data in a portable electronic format, typically a password-protected PDF or a machine-readable CSV file. If you would rather a printed copy sent by secure post, I can set up that upon request. The response also includes an explanatory cover letter that maps each piece of data to the processing purpose and the legal basis, making the information easy to understand.
Method for Submit a DSAR to Sankra Casino
Necessary Information for a Valid Request
To complete your request efficiently, I need specific identification details. Provide your full name, the email address registered to your Sankra Casino account, and your username or account number. Describe the specific data you want to access. A general request is valid, but specifying it speeds up the process. Mention if you need the reply in a particular language or format.
Contact Channels and Address
Forward your DSAR by email to our dedicated Data Protection Officer at dataprotection@sankra.no. Alternatively, you can mail a signed written request to Sankra Casino’s registered address in Norway. I recommend using email for speed and security. All incoming DSARs are logged and acknowledged within two business days.
Response Timelines and Possible Limitations
Under GDPR, I must respond to your DSAR without undue delay, and at the latest within one month of obtaining the authenticated request. If your request is complex or you submit multiple requests, I may lengthen this period by up to two further months. I will inform you of any prolongation within the first month, together with the grounds for the delay, so you are never in doubt.
Restricted circumstances may prevent full divulgence, for example if releasing the data would infringe others’ rights or expose confidential business data. In such cases I redact or reject the relevant portion. I give the first response without charge, but if you make manifestly unfounded or excessive requests, I may charge a fee or decline to act, always explaining the reason and your right to complain to the Datatilsynet.
Frequently Asked Questions
Is it possible to ask for data about someone else, like a family member?
Information is released solely to the person it relates to. For privacy protection, I will not release information about someone else, even a relative. Should you possess legal authority such as a power of attorney, please submit that paperwork. Otherwise the third party must submit their own DSAR.
What should I do if I lost my registered email address?
If you lost your email, contact support with full name, date of birth, and registered postal address or phone. I can verify your identity and recover account details, then process the DSAR. This may add a few days, but I will keep you informed.
How long do you keep my data after I close my account?
I hold personal data for the period stipulated by Norwegian anti-money laundering laws, generally five years after account closure. Once retention ends, data is securely destroyed unless a longer timeframe is legally required or needed for legal disputes. Full retention schedules are available in my privacy notice.
May I receive a copy of information from my terminated account?
Certainly. Even following the closure of your Sankra Casino account, your access rights continue. You may file a DSAR for the information I still retain. The steps are unchanged: present identification and state the information you seek. I will locate the archived records and supply them within the same legal timeframe.
What if I am not satisfied with the response?
If you feel I have not fulfilled my obligations, reach out for an explanation. The issue will be reviewed and an additional response will be given. Additionally, you are entitled to lodge a complaint with the Data Protection Authority. They will conduct an independent investigation into whether I fulfilled my duties.
Does submitting a DSAR affect my account status?
Not at all. Exercising your data protection rights has no negative impact on your account. I treat access requests neutrally and will not restrict your account, terminate services, or alter loyalty benefits because you asked for data. Transparency is fundamental here, and I encourage you to use your rights.