At Incaspin Casino, we take your privacy and data protection rights seriously. If you are a player or an affiliate based in Belgium, you are eligible to exercise your right of access under the General Data Protection Regulation (GDPR) and Belgian privacy laws. This page outlines how you can file a Data Subject Access Request (DSAR) to obtain a record of the personal data we store about you, the steps we follow to confirm your identity, and what you can look forward to throughout the procedure.

Knowing Your Personal Data Rights in Belgium

Belgium enforces the GDPR through its national legislation, so you have clear control over your personal information. You can utilize our casino platform or join our affiliate programme. Either way, you have the right to know what data we process, why we process it, and who we share it with. We handle these rights openly and reply without excessive delays.

The Belgian Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données) supervises compliance and delivers guidance. Your rights encompass access, rectification, erasure, restriction of processing, data portability, and the right to object. A Data Subject Access Request is the standard route for exercising your right of access, allowing you to receive a copy of the personal data we hold.

What Is a Data Subject Access Request (DSAR)?

A Data Subject Access Request represents a written inquiry you can submit to any organisation that manages your personal data. Under Article 15 of the GDPR, you are granted confirmation of whether we process your data. If we do, you are given receive a copy of that data along with supplementary information about the processing, including the purposes, categories of data, recipients, and the envisaged retention period.

At Incaspin Casino, we process every DSAR with care. The request is free of charge in most circumstances, although we may charge a reasonable fee for manifestly unfounded or excessive requests. We aim to offer a complete and understandable response that helps you verify the lawfulness of our processing activities.

Steps for Submit a DSAR to Incaspin Casino

Sending a DSAR to us is simple. You can use either email or our internet contact form. The method secures your privacy and enables us locate your information accurately. To aid us handle your request swiftly, include particular details and be prepared to verify your identity.

Select Your Contact Method

Email Submission

Send your request directly to our appointed Data Protection Officer at [email protected]. Use the subject line “Data Subject Access Request – Belgium” to securng prompt routing. In the body of your email, state plainly that you are using your right of access and supply your full name, registered email address, and username if applicable.

Online Contact Form

Alternatively, you can use the contact form accessible on our website https://incaspin-casino.eu/fr-be/legal-and-affiliates/. Choose the privacy or data protection category from the dropdown menu and describe your request in the message field. We advise including a scanned copy of a valid identity document if you wish to hasten the verification step, though this is not mandatory at the submission stage.

Details You Need Provide

To avoid delays, incorporate the following information with your DSAR:

• The full official name along with date of birth
• The email address associated with your Incaspin Casino account
• Your account username alternatively affiliate ID, if applicable
• A clear description of the data you wish to access (for illustration, transaction history, login logs, alternatively all personal data)
• Any further details that may help us locate your records, including your approximate registration date

If you are an affiliate, mention your affiliate tracking code and the web page or websites you promote. This helps us gather the relevant performance and commission data.

Identity Verification Requirements

Before we provide any personal data, we must confirm your identity to prevent unapproved disclosure. We typically require a copy of a government-issued photo ID, such as a passport alternatively identity card, and a recent utility bill alternatively bank statement showing your name and address. You may censor any sensitive information not required for verification, such as your national identification number or photograph, if you wish.

We validate documents within two business days and will contact you if we need extra proof. Once your identity is confirmed, the one-month response period begins. If we cannot validate your identity, we will advise you and may ask for alternative documentation.

Authentication and Handling Deadlines

Once we obtain your DSAR and confirm your identity, the statutory one-month period commences. We seek to respond within this timeframe, but we may extend it by two additional months if your request is complicated or you have made multiple requests. If that happens, we will inform you of the extension and the reasons within the first month.

If we refuse to act on your request, we will provide a clear explanation and inform you of your right to lodge a complaint with the Belgian Data Protection Authority and to seek a judicial remedy. We never treat differently against individuals who exercise their data rights, and we maintain a log of all DSARs to ensure accountability.

You will receive your data electronically via secure email or through a password-protected download link. We secure all responses to protect your information in transit. If you opt for a physical copy, we can arrange postal delivery after confirming your address, though electronic delivery is quicker and uses less paper.

What Information Can You Request?

Through a DSAR, you can request retrieval of a bbc.co.uk broad scope of personal data that Incaspin Casino manages. We will give you a structured, widely utilized, and machine-readable version of your data where possible. The exact information obtainable is based on your engagement with our services, but it generally includes the following categories:

• Registration account details, such as name, address, email, and date of birth
• Payment and transactional history, including deposits, withdrawals, and bonus activity
• Log-in records and IP address logs
• Correspondence records with our customer support team
• Gambling responsibility limits and self-exclusion records
• Affiliate performance data, click rate analytics, and commission reports (for affiliates)

If you require a certain document, like a copy of a contract or a particular customer service transcript, indicate this in your request. We will make every effort to honor fair requests and will outline if any data cannot revealed owing to legal privilege or third-party rights.

Affiliate Scheme and Data Protection

Incaspin Casino’s affiliate programme relies on trust and transparency. When you join as an affiliate, we obtain personal data like your name, contact details, payment information, and website traffic statistics. We act as the data controller for this information and handle it to oversee our partnership, compute commissions, and fulfil legal obligations.

As an affiliate, you possess the same DSAR rights as any other data subject. You can demand access to all personal data we keep in connection with your affiliate account, such as performance metrics, payment history, and any correspondence. We will also verify the third-party tracking platforms we use and the data they handle on our behalf.

We encourage affiliates to examine the privacy notice within our affiliate terms and conditions. If you experience concerns about how your data is distributed with advertising networks or analytics providers, you can submit them through a DSAR. Our Data Protection Officer will respond to any queries and, where necessary, support you move your data to another programme.

We do not exchange affiliate personal data to third parties. All data transfers outside the European Economic Area are safeguarded by standard contractual clauses or equivalent safeguards. Your trust is important to our long-term partnership, and we remain committed to upholding high standards of data protection.

Common Questions

How quickly will I get my data after filing a DSAR?

We are required to respond without undue delay and at the latest within one month of receiving your request and verifying your identity. In cases where your request is especially complicated or you have made several requests, we might extend this timeframe by up to two extra months. We will notify you of any extension within the first month and explain the reasons. As a rule, uncomplicated requests are usually handled within two or three weeks.

Can I submit a DSAR on behalf of someone else?

Yes, you can submit a DSAR on behalf of another individual if you have legal authorisation, such as a power of attorney or parental responsibility. Documentation of your authority will be necessary, and we may also verify the identity of the individual whose data is requested. This keeps us from disclosing personal data to unauthorised third parties. When acting as an authorised representative, enclose the appropriate documentation with your request to sidestep delays.

Is there a fee for making a data access request?

In numerous cases, sending a DSAR is totally free of charge. We maintain the right to charge a reasonable administrative fee if your request is manifestly unfounded or disproportionate, especially if it is repetitive. Before any fee is imposed, we will reach out to you to review the situation and find ways to narrow your request. Fair access counts to us, and we will not use fees as a barrier to your entitlements.

How about I am not pleased with the reply?

If you believe our response is insufficient or we have not handled your DSAR correctly, communicate with our Data Protection Officer as a first step to request explanation. We are committed to solving issues promptly. If you stay not satisfied, you have the right to file a complaint with the Belgian Data Protection Authority (APD/GBA). You may also pursue a judicial redress. We will supply the necessary contact particulars for the authority upon request.

Am I allowed to request removal of my data instead of access?

Absolutely, you have the right to request erasure of your personal data under certain conditions, such as when the data is no longer necessary for the objectives for which it was collected or if you retract consent. A DSAR, however, is exclusively for inspection, not deletion. If you want to utilize your right to erasure, file a separate request unambiguously stating that intention. We will evaluate it against legal storage requirements and reply as needed.

Can affiliates have the same data access rights as gamblers?

Absolutely. Affiliate members are data subjects under the GDPR and enjoy the same rights as players. You can demand access to all personal data we handle in connection with your affiliate activity, including commission records, traffic logs, and communications. We treat affiliate DSARs with the equal care and confidentiality. Our affiliate programme’s privacy notice specifies the specific data categories, and we are ready to support with any queries through the DSAR process.