How to Request Subject Access Data from a Gambling Operator

Ask for the full account record

A subject access request should ask for the personal data held about you, not just a simple transaction list. For UK data protection requests, organisations generally need to respond without undue delay and within one month, subject to limited extensions for complex requests.

Request the complete account file: deposits, withdrawals, gameplay or betting history where available, account notes, KYC/source-of-funds records, safer-gambling records, limits, exclusions, live chats, emails, complaints and any internal review notes that can be disclosed.

• Ask for CSV, JSON, XML, HTML or TXT files where possible.
• Ask for copies of correspondence and chat transcripts.
• Ask for account notes, risk reviews and safer-gambling records.
• Ask for the terms or version identifiers that applied to your account or promotion.

Machine-readable files are valuable

Screenshots can be useful, but machine-readable files are easier to sort, analyse and cross-check. They can show patterns that are hard to see manually, such as repeated deposit spikes, withdrawal delays, KYC timing or operator interaction points.

If the operator gives a PDF only, keep it. But if you can get structured files as well, upload those first in the personalised report setup.

Use the SAR before making the main argument

Many users complain from memory and then later discover that the data tells a stronger story. Waiting for the SAR can feel slower, but it may avoid a weak first complaint and save time later.

A practical SAR wording approach

Ask the operator data protection officer for all personal data connected to the account. Include account notes, transactional records, deposits, withdrawals, betting or gameplay history where available, KYC/source-of-funds checks, safer-gambling records, complaints, emails and live chats.

Ask for machine-readable formats where possible. CSV, JSON, XML, HTML or TXT exports are usually more useful than screenshots because they can be sorted, searched and analysed for patterns.

• Use the email address registered to the account.
• Include account identifiers if you have them.
• Ask for structured exports as well as correspondence.
• Save the request date and every reply.

Why the SAR changes the complaint

The SAR can reveal the operator timeline, internal notes, safer-gambling interactions and the exact data used to make decisions. That is why GamClaim.org asks for SAR/export files before manual review wherever possible.