Online bookies accused of UK privacy breaches with use of cookie banners
Most gambling websites nudge users towards accepting tracking data and harvest it before consent is given, study shows Online bookmakers and casinos have been accused of widespread non-compliance of information privacy requirements, including “data surveillance” of customers, according to a study. Nearly nine out of 10 (86%) licensed British gambling websites appear to be flouting the general…
A study by researchers at the University of Swansea's GREAT Centre has found that nearly 86% of licensed British gambling websites are in violation of information privacy requirements, specifically the General Data Protection Regulation (GDPR). The study examined the use of cookie banners, which ask users for permission to share their information when they first visit a website.
The research indicates that nearly a quarter (24%) of the 624 gambling websites tested did not offer an option to turn off tracking software, which allows advertisers to track users' online activities and target them with personalized marketing. Notable operators that did not provide an option to opt-out include Hollywood Bets, sponsored by Brentford FC, and Admiral Casino, owned by a high-street slot machine firm.
Two-thirds of the operators began collecting users' data before they had given consent, including well-known operators like Ladbrokes and William Hill. These data collection practices often involve third-party analytics platforms used for marketing purposes. Moreover, 2% of the websites studied offered no consent choice at all, including Dafabet, the sponsor of Celtic FC.
The study also found that the majority of bookies and online casinos use "dark patterns" to encourage users to accept data sharing. These patterns include emphasizing the least privacy-friendly option, defaulting to pre-selection of privacy-unfriendly settings, and hiding the reject option behind a second layer. While these patterns do not necessarily constitute breaches, 86% of websites featuring them have committed at least one breach of GDPR, a rate significantly higher than the 54% observed in a previous study of all types of websites.
The Information Commissioner's Office (ICO) is currently undertaking a multi-year project to compel websites to comply with GDPR rules governing cookie and tracking regulations. However, the study suggests that the ICO has not taken meaningful enforcement action against the online gambling sector, raising concerns about the protection of consumers' privacy rights.
Written by urgent.news from Guardian Business's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
