At Incaspin Casino, we are committed to your privacy and data rights https://incaspin-casino.eu/fr-be/legal-and-affiliates/. If you are a player or an affiliate based in Belgium, you are eligible to exercise your right of access under the General Data Protection Regulation (GDPR) and Belgian privacy laws. This page explains how you can submit a Data Subject Access Request (DSAR) to get a copy of the personal data we keep about you, the steps we take to confirm your identity, and what you can anticipate throughout the procedure.
Affiliate Programme and Data Protection
Incaspin Casino’s affiliate programme is built on trust and transparency. When you register as an affiliate, we obtain personal data like your name, contact details, payment information, and website traffic statistics. We act as the data controller for this information and manage it to administer our partnership, determine commissions, and comply with legal obligations.
As an affiliate, you enjoy the same DSAR rights as any other data subject. You can demand access to all personal data we hold in connection with your affiliate account, covering performance metrics, payment history, and any correspondence. We will also confirm the third-party tracking platforms we utilise and the data they process on our behalf.
We urge affiliates to examine the privacy notice within our affiliate terms and conditions. If you have concerns about how your data is distributed with advertising networks or analytics providers, you can present them through a DSAR. Our Data Protection Officer will address any queries and, where necessary, assist you move your data to another programme.
We do not sell affiliate personal data to third parties. All data transfers outside the European Economic Area are protected by standard contractual clauses or equivalent safeguards. Your trust matters to our long-term partnership, and we remain committed to maintaining high standards of data protection.
Authentication and Processing Deadlines
Once we receive your DSAR and authenticate your identity, the statutory one-month period commences. We seek to respond within this timeframe, but we may extend it by two additional months if your request is complicated or you have made multiple requests. If that happens, we will notify you of the extension and the reasons within the first month.
If we decline to act on your request, we will offer a clear explanation and inform you of your right to lodge a complaint with the Belgian Data Protection Authority and to seek a judicial remedy. We never discriminate against individuals who exercise their data rights, and we maintain a log of all DSARs to ensure accountability.
You will receive your data electronically via secure email or through a password-protected download link. We secure all responses to protect your information in transit. If you prefer a physical copy, we can arrange postal delivery after confirming your address, though electronic delivery is quicker and uses less paper.
Instructions for Submit a DSAR to Incaspin Casino
Submitting a DSAR to us is easy. You can use either email or our online contact form. The method protects your privacy and enables us locate your information accurately. To assist us process your request efficiently, include detailed details and be ready to verify your identity.
Choose Your Contact Method
Email Submission
Forward your request directly to our appointed Data Protection Officer at dpo@incaspin-casino.eu. Employ the subject line “Data Subject Access Request – Belgium” to guarantee prompt routing. In the body of your email, state explicitly that you are using your right of access and provide your full name, registered email address, and username if relevant.
Online Contact Form
Alternatively, you can use the contact form available on our website. Choose the privacy or data protection category from the dropdown menu and outline your request in the message field. We suggest including a scanned copy of a valid identity document if you desire to hasten the verification step, although this is not obligatory at the submission stage.
Information You Must Provide
To avoid delays, add the following information with your DSAR:
- The full registered name and date of birth
- The email address associated with your Incaspin Casino account
- Your account username alternatively affiliate ID, if applicable
- A clear description of the data you wish to access (for example, transaction history, login logs, alternatively all personal data)
- Any additional details that may help us locate your records, such as your approximate registration date
If you are an affiliate, specify your affiliate tracking code and the website or websites you promote. This helps us collect the pertinent performance and commission data.
ID Validation Necessities
Before we release any personal data, we must verify your identity to prevent unapproved disclosure. We generally require a copy of a government-issued photo ID, such as a passport alternatively identity card, and a recent utility bill alternatively bank statement showing your name and address. You may remove any sensitive information not required for verification, such as your national identification number or photograph, if you so choose.
We authenticate documents within two business days and will contact you if we need further proof. Once your identity is verified, the one-month response period begins. If we cannot confirm your identity, we will notify you and may ask for substitute documentation.
Knowing Your Information Rights in Belgium
Belgium enforces the GDPR through its national legislation, so you have defined control over your personal information. You may use our casino platform or participate in our affiliate programme. Either way, you have the right to know what data we process, why we process it, and who we share it with. We handle these rights openly and answer without needless delays.
The Belgian Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données) monitors compliance and delivers guidance. Your rights cover access, rectification, erasure, restriction of processing, data portability, and the right to object. A Data Subject Access Request is the standard route for exercising your right of access, allowing you to acquire a copy of the personal data we hold.
What Is Meant by a Data Subject Access Request (DSAR)?
A Data Subject Access Request represents a written inquiry you can send to any organisation that manages your personal data. Under Article 15 of the GDPR, you are given confirmation of whether we process your data. If we do, you are entitled to receive a copy of that data along with supplementary information about the processing, including the purposes, categories of data, recipients, and the envisaged retention period.
At Incaspin Casino, we process every DSAR with care. The request is free of charge in most circumstances, although we may charge a reasonable fee for manifestly unfounded or excessive requests. We aim to offer a complete and understandable response that helps you verify the lawfulness of our processing activities.
Which Data May You Request?
Through a DSAR, you can ask for access to a wide range of personal data that Incaspin Casino handles. We will supply you with a structured, commonly used, and machine-readable version of your data where possible. The exact information available depends on your engagement with our services, but it typically includes the following categories:
- Account registration details, including name, address, email, and date of birth
- Financial and deposit history, such as deposits, withdrawals, and bonus activity
- Log-in records and IP address logs
- Communication history with our customer support team
- Gambling responsibility limits and self-exclusion records
- Partner performance information, click-through statistics, and earnings reports (for affiliates)
If you need a certain document, for example a copy of a contract or a particular customer service transcript, specify this in your request. We will try our hardest to accommodate fair requests and will outline if any data cannot be disclosed due to legal privilege or third-party rights.
Common Questions
How long does it take to receive my data after submitting a DSAR?
Our obligation is to reply promptly and no later than one month from receiving your request and confirming your identity. If your request is particularly complex or you have submitted multiple requests, we may extend this period by up to two additional months. You will be informed about any extension during the initial month along with its justification. Typically, simple requests are completed in two to three weeks.
Is it possible to file a DSAR for another person?
Certainly, you may submit a DSAR for someone else provided you have legal authority, for instance a power of attorney or parental responsibility. We will require proof of your authority and may still need to verify the identity of the data subject. This prevents us from sharing personal information with unauthorized outsiders. As an authorized representative, attach the required documents with your application to prevent holdups.
Is there a fee for making a data access request?
In numerous cases, submitting a DSAR is entirely free of charge. We reserve the right to charge a fair administrative fee if your request is manifestly unfounded or excessive, particularly if it is repeated. Before any fee is applied, we will contact you to review the situation and find ways to tailor your request. Fair access matters to us, and we will not apply fees as a obstacle to your entitlements.
What if I am not satisfied with the answer?
If you think our response is incomplete or we have not managed your DSAR accurately, reach out to our Data Protection Officer first to request elucidation. We are pledged to solving issues promptly. If you stay unhappy, you have the right to file a complaint with the Belgian Data Protection Authority (APD/GBA). You may also pursue a court solution. We will provide the relevant contact information for the authority upon request.
Am I allowed to request deletion of my data instead of retrieval?
Absolutely, you have the right to request deletion of your personal data under specific situations, such as when the data is no longer needed for the purposes for which it was gathered or if you withdraw agreement. A DSAR, though, is specifically for access, not erasure. If you desire to utilize your right to deletion, send a distinct request unambiguously stating that intention. We will assess it against legal keeping duties and respond as needed.
Do affiliates have the same data access rights as users?
Absolutely. Affiliates are data subjects under the GDPR and possess the similar rights as players. You can demand access to all personal data we manage in connection with your affiliate activity, including commission records, traffic logs, and communications. We handle affiliate DSARs with the same level of care and confidentiality. Our affiliate programme’s privacy notice details the specific data categories, and we are pleased to support with any queries through the DSAR process.