for early access to the latest igaming videos!
and get the latest igaming news first!
Kenya’s data regulator ruled that the betting company demanded excessive financial records from a player.
A simple request that became a landmark case
When one player tried to close his account, it sparked a major debate over data privacy in Kenya.
Kenyan betting company Betika has been ordered to pay KSh 250,000 (€1,650) to a former player after breaking data protection rules. The decision came from the Office of the Data Protection Commissioner (ODPC), which found that Betika asked for more information than necessary during an account closure.
The case began when Bosco Otieno, a loyal Betika player for six years, decided to stop betting in June 2025. When he asked to close his account, the company refused until he provided his national ID and three months of M-Pesa statements.
Privacy versus procedure
How much personal data should operators collect when verifying identity?
Otieno saw the request as an invasion of privacy. He filed a complaint with the ODPC, saying Betika’s actions violated the Data Protection Act of 2019.
He argued that his betting history showed no signs of fraud or suspicious activity, so there was no reason to ask for detailed financial records.
He told regulators:
“The company’s request risked misuse of my financial information and went beyond what was necessary for account closure.”
Betika disagreed. It said the Proceeds of Crime and Anti-Money Laundering Act (POCAMLA) requires operators to confirm both identity and transaction sources. The firm also pointed to its privacy policy, which allows it to request additional documents before deleting an account.
The regulator draws a line
Kenya’s data watchdog balanced compliance against consumer rights.
After reviewing the case, Data Commissioner Immaculate Kassait ruled that asking for a national ID was acceptable. It helped verify identity and complied with anti-money laundering laws.
However, the demand for three months of M-Pesa statements went too far. Kassait called it disproportionate and unnecessary, saying it exposed personal information unrelated to account closure. The ODPC ordered Betika to pay compensation and permanently delete Otieno’s data from its records.
A warning to Kenya’s betting industry
The ruling sends a strong message to operators about responsible data handling.
Betika has 30 days to appeal the decision before the High Court of Kenya. But the case already marks a turning point. It shows how Kenya’s data authorities are tightening control over how companies collect, store, and use player data.
In March 2025, the ODPC issued a similar penalty in Kenya Data Protection Act: SportPesa Penalized For Breaching Privacy Laws, confirming that enforcement is becoming more consistent across the sector.
For operators, verifying identity is important, but collecting too much data can cost more than a fine, it can cost something bigger: trust. For more background on Kenya’s rapidly evolving betting landscape, see the Kenya iGaming Market Research Report, which outlines growth trends, tax policies, and regulatory updates shaping the market in 2025.
Source: Focus Gaming News
