UK gambling websites accused of cookie-related GDPR violations

Published: 07/09/2026
| The Guardian

New analysis by Swansea University's Gambling Research, Education and Treatment Centre (GREAT Centre) reveals that nearly nine out of 10 licensed British gambling websites appear to be breaching the UK General Data Protection Regulation (GDPR) through unlawful cookie banners and customer data surveillance.

An investigation of 624 gambling websites revealed that 86% committed at least one apparent GDPR breach, compared to 54% across the wider internet. Two-thirds of operators, including Ladbrokes and William Hill, began harvesting user records prior to consent being granted, transmitting information to third-party analytics platforms for marketing purposes. Furthermore, 24% of examined platforms, such as Hollywood Bets and Admiral Casino, offered no option to disable tracking, while 2% provided no consent choice whatsoever, including Dafabet.

The study also found widespread use of deceptive interface designs (dark patterns) to nudge users toward data sharing. These techniques included visually prioritising the least privacy-friendly options on 60% of sites, burying rejection controls behind a secondary layer on 47%, and pre-selecting invasive settings on 29%.


Training announcement: Freevacy provides comprehensive training for new and existing practitioners on the changes introduced by the DUA Act to the UK General Data Protection Regulation (GDPR), the Data Protection Act 2018 (DPA18), and the Privacy and Electronic Communications Regulations 2003 (PEC-Regulations). Our courses are always up to date and provide a forum for learning and discussing how to ensure your data protection processes remain compliant. Find out more.

Read Full Story
Gambling

What is this page?

You are reading a summary article on the Privacy Newsfeed, a free resource for DPOs and other professionals with privacy or data protection responsibilities helping them stay informed of industry news all in one place. The information here is a brief snippet relating to a single piece of original content or several articles about a common topic or thread. The main contributor is listed in the top left-hand corner, just beneath the article title.

The Privacy Newsfeed monitors over 300 global publications, of which more than 3,250 summary articles have been posted to the online archive dating back to the beginning of 2020. A weekly roundup is available by email every Friday.