Swansea University Audit Alleges GDPR Violations on 86 Percent of UK Gambling Commission Licensed Sites

New research from Swansea University’s Gambling Research, Education and Treatment Centre has identified widespread data protection failings across the UK online gambling sector. The audit of all 624 casino and sports betting websites licensed in Great Britain concluded that 86 per cent allegedly breach General Data Protection Regulation requirements. As reported by Focus Gaming News, many operators collect and share personal data before consent while deploying interface designs that limit or obscure user choice.

The study also tested how these designs influence actual behaviour among UK gamblers. Researchers concluded that common consent practices make users significantly more likely to accept tracking even when it conflicts with their stated privacy preferences. The data obtained supports personalised advertising and cross-site tracking, practices the authors link to behavioural indicators of gambling-related harm.

Scale of Consent and Tracking Failures

Sixty-seven per cent of sites began gathering personally identifiable information before consent, transmitting unique user identifiers to third-party analytics and marketing services. Twenty-four per cent provided no option to refuse tracking, including 2 per cent that displayed no consent banner at all. Only 29 per cent of banners allowed users to reject tracking as easily as they could accept it, with some sites requiring as many as 15 clicks to decline.

Most sites relied on so-called “dark patterns.” Sixty per cent highlighted the accept button, 47 per cent hid the reject option behind an additional menu layer, and 29 per cent pre-selected settings that favoured data collection.

Experiment Shows Effect on User Decisions

An experiment involving 615 UK online gamblers exposed participants to simulated betting sites with one of six banner formats. The design most commonly used by operators made users three to four times more likely to accept tracking compared with a neutral one-click alternative. Those who accepted tracking rated their decision 4.4 out of 10 for reflecting true privacy preferences, against 7.9 out of 10 for those who opted out. The pattern held regardless of individual gambling risk level.

PhD researcher Jack McGarrigle said: “We audited every licensed gambling site in the UK and the picture was stark. Most aren’t giving customers a fair choice about tracking. Some make it a single click to accept and up to fifteen to refuse. Our follow-up experiment showed this isn’t incidental; it works exactly as you’d expect, nudging people toward decisions they don’t actually agree with.”

The findings leave UK operators facing questions over how quickly they can neutralise these practices before regulatory or litigation exposure increases.

Reporting: Focus Gaming News

Generated by SCCG’s automated editorial system from published source reporting. SCCG Management holds editorial responsibility.