At Incaspin Casino, we take your privacy and data protection rights seriously. If you are a player or an affiliate based in Belgium, you are allowed to exercise your right of access under the General Data Protection Regulation (GDPR) and Belgian privacy laws. This page explains how you can send a Data Subject Access Request (DSAR) to get a copy of the personal data we store about you, the steps we implement to authenticate your identity, and what you can anticipate throughout the procedure.
Comprehending Your Personal Data Rights in Belgium
Belgium applies the GDPR through its national legislation, so you have defined control over your personal information. You are welcome to use our casino platform or take part in our affiliate programme. Either way, you have the right to know what data we process, why we process it, and who we share it with. We handle these rights openly and reply without needless delays.
The Belgian Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données) monitors compliance and delivers guidance. Your rights cover access, rectification, erasure, restriction of processing, data portability, and the right to object. A Data Subject Access Request is the standard route for using your right of access, permitting you to receive a copy of the personal data we hold.
Partnership Programme and Privacy Protection
Incaspin Casino’s affiliate programme is built on trust and transparency. When you sign up as an affiliate, we collect personal data like your name, contact details, payment information, and website traffic statistics. We function as the data controller for this information and process it to manage our partnership, compute commissions, and fulfil legal obligations.
As an affiliate, you possess the same DSAR rights as any other data subject. You can ask for access to all personal data we hold in connection with your affiliate account, including performance metrics, payment history, and any correspondence. We will also verify the third-party tracking platforms we use and the data they process on our behalf.
We encourage affiliates to check the privacy notice within our affiliate terms and conditions. If you have concerns about how your data is shared with advertising networks or analytics providers, you can raise them through a DSAR. Our Data Protection Officer will handle any queries and, where necessary, assist you relocate your data to another programme.
We do not exchange affiliate personal data to third parties. tout ce que vous devez savoir All data transfers outside the European Economic Area are safeguarded by standard contractual clauses or equivalent safeguards. Your trust is important to our long-term partnership, and we stay committed to upholding high standards of data protection.
Instructions for Submit a DSAR to Incaspin Casino
Filing a DSAR to us is simple. You can use either email or our web contact form. The process secures your privacy and helps us locate your information precisely. To aid us handle your request efficiently, include specific details and be set to verify your identity.
Choose Your Contact Method
Email Submission
Submit your request directly to our appointed Data Protection Officer at dpo@incaspin-casino.eu. Utilize the subject line “Data Subject Access Request – Belgium” to guarantee prompt routing. In the body of your email, state clearly that you are using your right of access and give your full name, registered email address, and username if applicable.
Online Contact Form
Alternatively, you could use the contact form accessible on our website. Pick the privacy or data protection category from the dropdown menu and outline your request in the message field. We advise adding a scanned copy of a valid identity document if you desire to expedite the verification step, though this is not required at the submission stage.
Information You Should Provide
To avoid delays, add the following data with your DSAR:
- The complete legal name along with date of birth
- The email address linked to your Incaspin Casino account
- Your account username or rather affiliate ID, if applicable
- A clear description of the data you want to access (for instance, transaction history, login logs, or all personal data)
- Any extra details that may help us locate your records, including your approximate registration date
If you are an affiliate, mention your affiliate tracking code and the website or websites you promote. This helps us collect the applicable performance and commission data.
Identity Verification Necessities
Before we release any personal data, we must establish your identity to prevent unapproved disclosure. We typically ask for a copy of a government-issued photo ID, such as a passport alternatively identity card, and a recent utility bill or possibly bank statement showing your name and address. You may remove any sensitive information not required for verification, including your national identification number or photograph, if you wish.
We validate documents within two business days and will contact you if we need additional proof. Once your identity is verified, the one-month response period begins. If we cannot verify your identity, we will notify you and may ask for alternative documentation.
Authentication and Handling Timeframes
Once we get your DSAR and authenticate your identity, the statutory one-month period starts. We seek to respond within this timeframe, but we may extend it by two additional months if your request is complex or you have made multiple requests. If that happens, we will notify you of the extension and the reasons within the first month.
If we refuse to act on your request, we will provide a clear explanation and inform you of your right to lodge a complaint with the Belgian Data Protection Authority and to seek a judicial remedy. We never treat differently against individuals who exercise their data rights, and we maintain a log of all DSARs to ensure accountability.
You will obtain your data electronically via secure email or through a password-protected download link. We encode all responses to protect your information in transit. If you opt for a physical copy, we can arrange postal delivery after confirming your address, though electronic delivery is quicker and uses less paper.
What Is a Data Subject Access Request (DSAR)?
A Data Subject Access Request constitutes a written inquiry you can send to any organisation that manages your personal data. Under Article 15 of the GDPR, you are granted confirmation of whether we process your data. If we do, you are given receive a copy of that data along with supplementary information about the processing, including the purposes, categories of data, recipients, and the envisaged retention period.
At Incaspin Casino, we process every DSAR with care. The request is free of charge in most circumstances, although we may charge a reasonable fee for manifestly unfounded or excessive requests. We aim to provide a complete and understandable response that helps you verify the lawfulness of our processing activities.
Which Data Are You Able To Request?
Through a DSAR, you can request viewing of a comprehensive set of personal data that Incaspin Casino manages. We will give you a formatted, standard, and electronically readable version of your data where possible. The specific information available depends on your engagement with our services, but it usually includes the following categories:
- Account setup details, such as name, address, email, and date of birth
- Financial and payment history, including deposits, withdrawals, and bonus activity
- Access records and IP address logs
- Communication history with our customer support team
- Responsible gambling limits and self-exclusion records
- Partner performance information, click-through statistics, and commission statements (for affiliates)
If you request a certain document, such as a copy of a contract or a particular customer service transcript, indicate this in your request. We will do our best to accommodate appropriate requests and will explain if any data cannot revealed due to legal privilege or third-party rights.
Frequently Asked Questions
How long does it take to receive my data after submitting a DSAR?
Our obligation is to reply promptly and no later than one month from receiving your request and confirming your identity. In cases where your request is especially complicated or you have made several requests, we might extend this timeframe by up to two extra months. We will notify you of any extension within the first month and explain the reasons. Typically, simple requests are completed in two to three weeks.
May I make a DSAR representing someone else?
You are permitted to file a DSAR for another person with legal authorization, like a power of attorney or parental rights. We will ask for evidence of your authorization and might also need to confirm the data subject’s identity. This prevents us from sharing personal information with unauthorized outsiders. When acting as an authorised representative, enclose the appropriate documentation with your request to sidestep delays.
Do I have to pay for submitting a data access request?
In most cases, plus ici, submitting a DSAR is entirely free of charge. We retain the right to charge a fair administrative fee if your request is manifestly unfounded or unreasonable, especially if it is persistent. Before any fee is charged, we will reach out to you to talk about the situation and find ways to tailor your request. Fair access matters to us, and we will not apply fees as a obstacle to your rights.
How about I am not satisfied with the response?
If you feel our response is not complete or we have not processed your DSAR accurately, communicate with our Data Protection Officer first to seek clarification. We are dedicated to resolving issues quickly. If you stay not satisfied, you have the right to file a complaint with the Belgian Data Protection Authority (APD/GBA). You may also request a judicial solution. We will provide the necessary contact details for the authority upon request.
Is it possible to request removal of my data instead of viewing?
Yes, you have the right to request erasure of your personal data under certain situations, such as when the data is no longer required for the purposes for which it was collected or if you withdraw agreement. A DSAR, though, is specifically for access, not erasure. If you want to exercise your right to removal, submit a different request unambiguously specifying that purpose. We will evaluate it against legal retention obligations and reply as needed.
Are affiliates have the same data access rights as players?
Absolutely. Affiliates are data subjects under the GDPR and enjoy the same rights as players. You can request access to all personal data we manage in connection with your affiliate activity, such as commission records, traffic logs, and communications. We handle affiliate DSARs with the equal care and confidentiality. Our affiliate programme’s privacy notice outlines the specific data categories, and we are pleased to support with any queries through the DSAR process.
