The casino Incaspin Data Subject Access Request for Belgian users

At Incaspin Casino, we are committed to your privacy and data rights. If you are a player or an affiliate based in Belgium, you are entitled to exercise your right of access under the General Data Protection Regulation (GDPR) and Belgian privacy laws. This page outlines how you can file a Data Subject Access Request (DSAR) to get a copy of the personal data we store about you, the steps we implement to authenticate your identity, and what you can expect throughout the process.

Comprehending Your Data Rights in Belgium

Belgium applies the GDPR through its national legislation, so you have clear control over your personal information. You may use our casino platform or take part in our affiliate programme. Either way, you have the right to know what data we process, why we process it, and who we share it with. We manage these rights openly and answer without excessive delays.

The Belgian Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données) monitors compliance and offers guidance. Your rights include access, rectification, erasure, restriction of processing, data portability, and the right to object. A Data Subject Access Request is the official route for executing your right of access, permitting you to receive a copy of the personal data we hold.

What Is Meant by a Data Subject Access Request (DSAR)?

A Data Subject Access Request represents a written inquiry you can send to any organisation that handles your personal data. Under Article 15 of the GDPR, you are granted confirmation of whether we process your data. If we do, you are given receive a copy of that data along with supplementary information about the processing, including the purposes, categories of data, recipients, and the envisaged retention period.

At Incaspin Casino, we process every DSAR with care. The request is free of charge in most circumstances, although we may charge a reasonable fee for manifestly unfounded or excessive requests. We aim to offer a complete and understandable response that helps you verify the lawfulness of our processing activities.

What Information Are You Able To Request?

Through a DSAR, you can ask for retrieval of a comprehensive set of personal data that Incaspin Casino manages. We will give you an organized, standard, and electronically readable copy of your data where possible. The exact information obtainable depends on your interaction with our services, but it usually includes the following categories:

• Registration account details, including name, address, email, and date of birth
• Payment and transactional history, including deposits, withdrawals, and bonus activity
• Access records and IP address logs
• Message logs with our customer support team
• Responsible gambling limits and self-exclusion records
• Affiliate activity data, click rate analytics, and earnings reports (for affiliates)

If you request a particular document, like a copy of a contract or a particular customer service transcript, indicate this in your request. We will try our hardest to honor appropriate requests and will clarify if any data cannot be disclosed because of legal privilege or third-party rights.

Steps for Submit a DSAR to Incaspin Casino

Submitting a DSAR to us is straightforward. You can use both email or our online contact form. The process protects your privacy and assists us locate your information precisely. To aid us process your request swiftly, include specific details and be prepared to verify your identity.

Pick Your Contact Method

Email Submission

Submit your request straight to our appointed Data Protection Officer at dpo@incaspin-casino.eu. Utilize the subject line “Data Subject Access Request – Belgium” to ensure prompt routing. In the body of your email, state explicitly that you are claiming your right of access and provide your full name, registered email address, and username if appropriate.

Online Contact Form

Otherwise, you may use the contact form present on our website. Pick the privacy or data protection category from the dropdown menu and explain your request in the message field. We advise including a scanned copy of a valid identity document if you desire to hasten the verification step, even if this is not required at the submission stage.

Data You Need Provide

To avoid delays, add the following data with your DSAR:

• Your entire legal name plus date of birth
• The email address linked to your Incaspin Casino account
• Your account username or rather affiliate ID, if applicable
• A clear description of the data you want to access (for instance, transaction history, login logs, or possibly all personal data)
• Any additional details that may help us locate your records, such as your approximate registration date

If you are an affiliate, include your affiliate tracking code and the web page or websites you promote incaspin-casino.eu. This helps us gather the pertinent performance and commission data.

ID Validation Necessities

Before we disclose any personal data, we must confirm your identity to prevent unapproved disclosure. We generally ask for a copy of a government-issued photo ID, such as a passport or identity card, and a recent utility bill alternatively bank statement showing your name and address. You may redact any sensitive information not required for verification, including your national identification number or photograph, if you prefer.

We verify documents within two business days and will contact you if we need additional proof. Once your identity is confirmed, the one-month response period begins. If we cannot confirm your identity, we will advise you and may ask for substitute documentation.

Identity check and Handling Timelines

Once we obtain your DSAR and authenticate your identity, the statutory one-month period begins. We seek to respond within this timeframe, but we may extend it by two additional months if your request is intricate or you have made multiple requests. If that happens, we will inform you of the extension and the reasons within the first month.

If we refuse to act on your request, we will provide a clear explanation and inform you of your right to lodge a complaint with the Belgian Data Protection Authority and to seek a judicial remedy. We never treat differently against individuals who exercise their data rights, and we maintain a log of all DSARs to ensure accountability.

You will get your data electronically via secure email or through a password-protected download link. We encrypt all responses to protect your information in transit. If you would rather a physical copy, we can arrange postal delivery after confirming your address, though electronic delivery is quicker and uses less paper.

Affiliate Programme and Personal Data Protection

Incaspin Casino’s affiliate programme is built on trust and transparency. When you sign up as an affiliate, we collect personal data such as your name, contact details, payment information, and website traffic statistics. We act as the data controller for this information and process it to manage our partnership, calculate commissions, and meet legal obligations.

As an affiliate, you possess the same DSAR rights as any other data subject. You can demand access to all personal data we store in connection with your affiliate account, such as performance metrics, payment history, and any correspondence. We will also verify the third-party tracking platforms we utilise and the data they handle on our behalf.

We encourage affiliates to review the privacy notice within our affiliate terms and conditions. If you experience concerns about how your data is disclosed with advertising networks or analytics providers, you can raise them through a DSAR. Our Data Protection Officer will respond to any queries and, where necessary, support you relocate your data to another programme.

We do not exchange affiliate personal data to third parties. All data transfers outside the European Economic Area are safeguarded by standard contractual clauses or equivalent safeguards. Your trust counts to our long-term partnership, and we keep committed to preserving high standards of data protection.

Common Questions

How long does it take to receive my data after submitting a DSAR?

We must answer without unnecessary delay and within a month of getting your request and checking your identity. In cases where your request is especially complicated or you have made several requests, we might extend this timeframe by up to two extra months. We will notify you of any extension within the first month and explain the reasons. As a rule, uncomplicated requests are usually handled within two or three weeks.

Is it possible to file a DSAR for another person?

Yes, you can submit a DSAR on behalf of another individual if you have legal authorisation, such as a power of attorney or parental responsibility. We will ask for evidence of your authorization and might also need to confirm the data subject’s identity. This keeps us from disclosing personal data to unauthorised third parties. When acting as an authorised representative, enclose the appropriate documentation with your request to sidestep delays.

Do I have to pay for submitting a data access request?

In many cases, sending a DSAR is completely free of charge. We retain the right to charge a fair administrative fee if your request is clearly unfounded or disproportionate, especially if it is repetitive. Before any fee is charged, we will contact you to talk about the situation and seek ways to tailor your request. Fair access matters to us, and we will not employ fees as a hindrance to your entitlements.

What if I am not content with the reply?

If you believe our response is incomplete or we have not managed your DSAR properly, communicate with our Data Protection Officer initially to seek explanation. We are dedicated to addressing issues quickly. If you remain not satisfied, you have the right to file a complaint with the Belgian Data Protection Authority (APD/GBA). You may also pursue a court redress. We will furnish the required contact details for the authority upon request.

Can I request erasure of my data instead of access?

Certainly, you have the right to request removal of your personal data under particular situations, such as when the data is no longer necessary for the purposes for which it was collected or if you retract permission. A DSAR, though, is exclusively for retrieval, not removal. If you desire to assert your right to erasure, send a separate request clearly specifying that purpose. We will evaluate it against legal storage duties and respond accordingly.

Can affiliates have the same data access rights as players?

Absolutely. Affiliate partners are data subjects under the GDPR and enjoy the similar rights as players. You can request access to all personal data we process in connection with your affiliate activity, covering commission records, traffic logs, and communications. We manage affiliate DSARs with the equal care and confidentiality. Our affiliate programme’s privacy notice details the specific data categories, and we are ready to support with any queries through the DSAR process.