1
1
I handle the confidentiality of every Sankra Casino user with utmost care. As a data controller based in Norway, I process personal information in full alignment with the General Data Protection Regulation and the Norwegian Personal Data Act. A Data Subject Access Request enables you request me specifically what personal data I maintain about your account, how it is utilized, and who it is disclosed with. This guide explains how to make a DSAR, what to look forward to, and how I uphold your rights during the process.
Data is only shared with the individual it pertains to. For privacy protection, I will not release information about someone else, even a relative. If you hold legal standing like a power of attorney, furnish that documentation. If not, the other person must submit their own DSAR.
In case you forgot your email, contact support with your complete name, date of birth, and registered home address or telephone. I can verify your identity and recover account details, then process the DSAR. This may add a few days, but I will keep you informed.
Personal data is kept for the duration mandated by Norwegian anti-money laundering regulations, usually five years following closure. After retention, data is securely deleted unless a longer period is legally mandated or needed for legal claims. Full retention schedules are available in my privacy notice.
Certainly. Your right to access persists even after your Sankra Casino account is closed. You can submit a DSAR for the data I still hold. The process is the same: provide identification and specify the information you need. I will find the stored records and deliver them within the same statutory period.
Should you think I have not adhered to requirements, get in touch for clarification. The issue will be reviewed and an additional response will be given. You may also file a grievance with the Data Protection Authority. They will conduct an independent investigation into whether I fulfilled my duties.

No. Asserting your data protection rights carries no negative consequences for your account. I treat access requests neutrally and will not restrict your account, terminate services, or alter loyalty benefits because you asked for data. Openness is essential here, and I urge you to exercise your rights.
A Data Subject Access Request represents a official mechanism introduced by Article 15 of the GDPR. It grants you the right to secure confirmation that I handle personal data about you and to receive a copy of that data. You can also learn why I manage it, which categories of data are relevant, and the recipients or categories of recipients I disclose it with, such as payment providers and regulatory compliance bodies. The DSAR is a strong transparency tool.
The scope of a DSAR is intentionally broad. It covers all personal information directly or indirectly linked to your Sankra Casino account, including registration details, transaction logs, responsible gaming records, and correspondence. I supply the data in a systematic, commonly used machine-readable format such as JSON or CSV, unless you request for a simple document.
Prior to disclosing any personal data, I must be certain I am communicating with the genuine data subject. This measure prevents unauthorized entry and identity fraud. GDPR requires me to take reasonable steps to verify your identity, notably when sensitive information is involved. I consequently ask for supporting documents, but I handle them securely and remove the verification data as soon as the process finishes.
You can verify your identity by providing a clear copy of a valid passport, national ID card, or driving licence. If your account details have changed, I may also ask for a recent utility bill showing your registered address. Please redact unnecessary sensitive information such as passport numbers. I only require the photograph and full name for verification. Digital copies sent through encrypted email are recommended.
My reply to your DSAR provides a detailed outline of the personal data I keep. This typically covers identity data, contact details, account transaction history, deposit and withdrawal records, responsible gambling markers, communication logs with support, and any documents you uploaded for KYC purposes. I also reveal if automated decision-making is used, such as risk profiling.
I provide the requested data in a portable electronic format, sankracasino partnerskapsmuligheter, typically a password-protected PDF or a machine-readable CSV file. If you choose a printed copy sent by secure post, I can set up that upon request. The response also features an explanatory cover letter that connects each piece of data to the processing purpose and the legal basis, making the information easy to understand.
To complete your request quickly, I need specific identification details. Supply your full name, the email address registered to your Sankra Casino account, and your username or account number. Specify the specific data you want to access. A general request is valid, but specifying it speeds up the process. State if you need the reply in a particular language or format.

Submit your DSAR by email to our dedicated Data Protection Officer at dataprotection@sankra.no. As an option, you can mail a signed written request to Sankra Casino’s registered address in Norway. I advise using email for speed and security. All incoming DSARs are logged and acknowledged within two business days.
Under GDPR, I must respond to your DSAR without unnecessary delay, and at the latest within a month of getting the confirmed request. If your request is complex or you make multiple requests, I may prolong this period by up to two extra months. I will advise you of any extension within the first month, together with the justifications for the delay, so you are always kept informed.
Limited circumstances may prevent full disclosure, for example if sharing the data would infringe others’ rights or disclose confidential business information. In such cases I censor or refuse the relevant portion. I offer the first response without charge, but if you make clearly baseless or unreasonable requests, I may levy a charge or choose not to act, always stating the reason and your right to lodge a complaint to the Datatilsynet.
Article 15 of the GDPR, applied in Norway through the Personal Data Act, gives every data subject the authority to ask for access to their personal data. I am required to confirm whether processing occurs, supply a copy of the data, and notify you of the purposes, categories, retention periods, and your related rights. This legal foundation guarantees you stay in control of your information while I preserve complete transparency.
Aside from access, you have the entitlement to rectification, erasure, restriction of processing, and data portability. If you think your data is wrong or partial, you can tell me to fix it. Under certain circumstances you can also request deletion. I reference these because a DSAR is often the first step before applying other rights. Being aware of the full scope assists you make precise requests.