At Incaspin Casino, we are committed to your privacy and data rights. If you are a player or an affiliate based in Belgium, you are eligible to exercise your right of access under the General Data Protection Regulation (GDPR) and Belgian privacy laws. This page explains how you can file a Data Subject Access Request (DSAR) to receive a version of the personal data we store about you, the steps we implement to verify your identity, and what you can look forward to throughout the journey.
Knowing Your Information Rights in Belgium
Belgium applies the GDPR through its national legislation, so you have defined control over your personal information. You can utilize our casino platform or join our affiliate programme. Either way, you have the right to know what data we process, why we process it, and who we share it with. We handle these rights openly and reply without unnecessary delays.
The Belgian Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données) oversees compliance and offers guidance. Your rights encompass access, rectification, erasure, restriction of processing, data portability, and the right to object. A Data Subject Access Request is the official route for executing your right of access, permitting you to acquire a copy of the personal data we hold.
Authentication and Processing Deadlines
Once we get your DSAR and confirm your identity, politique de confidentialité Incaspin Casino, the statutory one-month period starts. We seek to respond within this timeframe, but we may extend it by two additional months if your request is complicated or you have made multiple requests. If that happens, we will advise you of the extension and the reasons within the first month.
If we decline to act on your request, we will provide a clear explanation and inform you of your right to lodge a complaint with the Belgian Data Protection Authority and to seek a judicial remedy. We never treat differently against individuals who exercise their data rights, and we maintain a log of all DSARs to ensure accountability.
You will receive your data electronically via secure email or through a password-protected download link. We encode all responses to protect your information in transit. If you opt for a physical copy, we can arrange postal delivery after confirming your address, though electronic delivery is more rapid and uses less paper.
What Is Meant by a Data Subject Access Request (DSAR)?
A Data Subject Access Request constitutes a written inquiry you can make to any organisation that handles your personal data. Under Article 15 of the GDPR, you are given confirmation of whether we process your data. If we do, you are given receive a copy of that data along with supplementary information about the processing, including the purposes, categories of data, recipients, and the envisaged retention period.
At Incaspin Casino, we process every DSAR with care. The request is free of charge in most circumstances, although we may charge a reasonable fee for manifestly unfounded or excessive requests. We aim to deliver a complete and understandable response that helps you verify the lawfulness of our processing activities.
Partnership Programme and Data Protection
Incaspin Casino’s affiliate programme relies on trust and transparency. When you join as an affiliate, we gather personal data such as your name, contact details, payment information, and website traffic statistics. We serve as the data controller for this information and manage it to manage our partnership, calculate commissions, and fulfil legal obligations.
As an affiliate, you enjoy the same DSAR rights as any other data subject. You can ask for access to all personal data we hold in connection with your affiliate account, covering performance metrics, payment history, and any correspondence. We will also specify the third-party tracking platforms we utilise and the data they handle on our behalf.
We encourage affiliates to review the privacy notice within our affiliate terms and conditions. If you have concerns about how your data is shared with advertising networks or analytics providers, you can present them through a DSAR. Our Data Protection Officer will respond to any queries and, where necessary, assist you relocate your data to another programme.
We do not exchange affiliate personal data to third parties. All data transfers outside the European Economic Area are secured by standard contractual clauses or equivalent safeguards. Your trust is important to our long-term partnership, and we remain committed to upholding high standards of data protection.
How to Submit a DSAR to Incaspin Casino
Submitting a DSAR to us is simple. You can use either email or our online contact form. The process safeguards your privacy and assists us locate your information accurately. To help us handle your request efficiently, include detailed details and be ready to verify your identity.
Select Your Contact Method
Email Submission
Send your request directly to our appointed Data Protection Officer at dpo@incaspin-casino.eu. Employ the subject line “Data Subject Access Request – Belgium” to ensure prompt routing. In the body of your email, state explicitly that you are exercising your right of access and provide your full name, registered email address, and username if relevant.
Online Contact Form
Otherwise, you could use the contact form accessible on our website. Pick the privacy or data protection category from the dropdown menu and explain your request in the message field. We recommend attaching a scanned copy of a valid identity document if you want to hasten the verification step, though this is not mandatory at the submission stage.
Data You Need Provide
To prevent delays, add the following data with your DSAR:
- Your full official name plus date of birth
- The email address linked to your Incaspin Casino account
- Your account username alternatively affiliate ID, if applicable
- A precise description of the data you desire to access (for instance, transaction history, login logs, or all personal data)
- Any extra details that may help us locate your records, such as your approximate registration date
If you are an affiliate, include your affiliate tracking code and the website or websites you promote. This helps us collect the relevant performance and commission data.
ID Validation Prerequisites
Before we disclose any personal data, we must confirm your identity to prevent improper disclosure. We typically request a copy of a government-issued photo ID, such as a passport or perhaps identity card, and a recent utility bill or bank statement showing your name and address. You may remove any sensitive information not required for verification, including your national identification number or photograph, if you wish.
We verify documents within two business days and will contact you if we need additional proof. Once your identity is established, the one-month response period begins. If we cannot verify your identity, we will inform you and may ask for substitute documentation.
What Information Are You Able To Request?
Through a DSAR, you can ask for access to a comprehensive set of personal data that Incaspin Casino processes. We will provide you with an organized, widely utilized, and electronically readable version of your data where possible. The specific information accessible depends on your interaction with our services, but it typically includes the following categories:
- Registration account details, such as name, address, email, and date of birth
- Financial and payment history, like deposits, withdrawals, and bonus activity
- Access records and IP address logs
- Communication history with our customer support team
- Gambling responsibility limits and self-exclusion records
- Partner performance information, click-through statistics, and commission statements (for affiliates)
If you request a certain document, for example a copy of a contract or a particular customer service transcript, specify this in your request. We will try our hardest to accommodate fair requests and will explain if any data is unable to shared owing to legal privilege or third-party rights.
Frequently Asked Questions
How long does it take to receive my data after submitting a DSAR?
We are required to respond without undue delay and at the latest within one month of receiving your request and verifying your identity. If your request is particularly complex or you have submitted multiple requests, we may extend this period by up to two additional months. We will notify you of any extension within the first month and explain the reasons. Typically, simple requests are completed in two to three weeks.
Can I submit a DSAR on behalf of someone else?
You are permitted to file a DSAR for another person with legal authorization, like a power of attorney or parental rights. We will require proof of your authority and may still need to verify the identity of the data subject. This ensures we do not reveal personal data to unauthorized parties. When acting as an authorised representative, enclose the appropriate documentation with your request to sidestep delays.
Is there a fee for making a data access request?
In numerous cases, submitting a DSAR is entirely free of charge. We reserve the right to charge a fair administrative fee if your request is manifestly unfounded or unreasonable, especially if it is persistent. Before any fee is applied, we will notify you to talk about the situation and seek ways to narrow your request. Fair access matters to us, and we will not apply fees as a hindrance to your rights.
How about I am not pleased with the answer?
If you think our response is incomplete or we have not managed your DSAR properly, contact our Data Protection Officer first to seek explanation. We are pledged to solving issues swiftly. If you stay unhappy, you have the right to file a complaint with the Belgian Data Protection Authority (APD/GBA). You may also seek a court redress. We will provide the relevant contact particulars for the authority upon request.
Is it possible to request removal of my data instead of retrieval?
Yes, you have the right to request deletion of your personal data under specific situations, such as when the data is no longer necessary for the objectives for which it was gathered or if you retract permission. conseils utiles A DSAR, however, is specifically for retrieval, not removal. If you want to exercise your right to deletion, file a different request explicitly indicating that intention. We will review it against legal retention duties and respond appropriately.
Can affiliates have the same data access rights as gamblers?
Absolutely. Affiliate partners are data subjects under the GDPR and have the same rights as players. You can request access to all personal data we manage in connection with your affiliate activity, including commission records, traffic logs, and communications. We treat affiliate DSARs with the same care and confidentiality. Our affiliate programme’s privacy notice specifies the specific data categories, and we are happy to support with any queries through the DSAR process.
