In an unprecedented case, Kenya’s Office of the Data Protection Commissioner (ODPC) ruled against the betting company Betika, ordering it to pay KSh 250,000 (€1,650) to a former customer. The decision marks a significant moment in the discussion surrounding data privacy in Kenya, particularly within the burgeoning betting industry. The case highlights the complexities of balancing compliance with data protection laws against the need for identity verification.
The scenario unfolded when Bosco Otieno, who had been a loyal player of Betika for six years, decided to close his betting account in June 2025. However, what seemed like a simple request quickly turned into a contentious issue. Betika informed Otieno that to close his account, he needed to provide his national ID along with three months of M-Pesa statements. Otieno viewed this demand as an overreach, an unnecessary intrusion into his financial privacy. He argued that his betting history was transparent and free from any fraudulent activity, thus eliminating the need for such extensive personal documentation.
The heart of the matter was clear: how much personal information should companies like Betika collect during identity verification processes? Otieno felt strongly that Betika’s demands were excessive and posed a risk to the misuse of his financial data. His concerns led him to file a formal complaint with the ODPC, citing violations of the Data Protection Act of 2019.
On the other hand, Betika defended its request, pointing to compliance requirements under the Proceeds of Crime and Anti-Money Laundering Act (POCAMLA). The company maintained that verifying both identity and the sources of transactions was mandatory under its privacy policy, which justified the request for additional documentation before account deletion.
The ODPC, led by Data Commissioner Immaculate Kassait, had the challenging task of weighing these competing interests. After careful examination, the ruling found that while requesting a national ID was reasonable and fell within anti-money laundering regulations, demanding three months of M-Pesa statements was indeed overstepping. This requirement was deemed disproportionate and unnecessary, revealing personal information unrelated to the account closure process. The ODPC ordered Betika not only to compensate Otieno but also to permanently erase his data from their records.
The ruling serves as a wake-up call for Kenya’s betting operators regarding the importance of responsible data management. The case underscores a growing trend where data protection authorities in Kenya are increasingly vigilant about how businesses handle customer data. It sends a clear message: while verifying identity is crucial, companies must ensure they do not infringe on privacy rights under the guise of regulatory compliance.
Betika now faces a 30-day window to appeal the decision to the High Court of Kenya. Yet, whether or not the appeal is pursued, the case signifies a pivotal change. It reflects the tightening grip of Kenya’s regulatory framework on the collection and management of personal data by companies. The industry is learning that over-collecting data not only incurs financial penalties but also risks eroding customer trust, a far more valuable commodity in the competitive betting market.
This case is not isolated. Earlier in 2025, a similar ruling was made against another major player in the sector, SportPesa, for breaching privacy laws under the Kenya Data Protection Act. Such consistent enforcement signals an era where operators in Kenya must tread carefully with their data practices to align with increasing regulatory expectations.
An analysis of Kenya’s betting landscape reveals a rapid evolution driven by growth trends, tax policies, and new regulations. As the market expands, companies are under pressure to adapt to these changes while maintaining customer trust. The consequences of failing to do so are evident in the fines and reputational damage that follow data privacy breaches.
While Betika defends its stance on legal compliance, the broader industry must adapt to a reality where customer data is safeguarded with utmost care. As Kenya’s betting market continues to thrive, this case will likely be studied as a benchmark for future regulatory decisions in the country. The implications are clear: operators must strike a delicate balance between necessary compliance and respecting customer privacy to succeed in this rapidly growing sector.
Erik Agary is a seasoned writer at True Games Reviews, specializing in gaming, casino games, and interactive entertainment. With a passion for all things digital, Erik dives deep into the latest trends and developments in the gaming world, offering insightful reviews and detailed analysis. His expertise spans across multiple gaming platforms, ensuring comprehensive coverage that resonates with both novice and experienced gamers alike.
4/5
