The headline figure of 86 percent non-compliance conceals a range of distinct violations, each of which carries its own legal weight under European and British data protection law. Two-thirds of the audited sites, 67 percent, began collecting personally identifiable information before users had given any consent at all, transmitting unique user identifiers to third-party analytics and marketing platforms. Under the GDPR and the UK GDPR, consent must be obtained before non-essential cookies are placed on a user’s device, so this practice constitutes a direct infringement rather than a technicality. In effect, the most commercially valuable data flows were already underway while the consent banner was still sitting on the screen, unread and unclicked.

Denial of choice was another widespread problem. Almost a quarter of the sites, 24 percent, offered users no way to refuse tracking whatsoever, and 2 percent displayed no consent banner at all, despite the legal requirement to do so. Even where a reject option technically existed, exercising it could be an ordeal. Only 29 percent of banners allowed users to reject tracking as easily as they could accept it, and on some sites it took as many as fifteen clicks to refuse consent, compared with the single click required to accept. The asymmetry is not subtle. A user who wants to protect their privacy must navigate layered menus and buried settings, while a user willing to be tracked resolves the interaction instantly.

The study catalogued these manipulative layouts under the umbrella term dark patterns, a phrase coined in user-experience research to describe interface designs that steer people toward choices they would not otherwise make. The audit found most banners employed at least one such technique. Visual emphasis of the accept button appeared on 60 percent of sites, making the compliant option the most eye-catching element on screen. Hiding the reject option behind a second layer of navigation occurred on 47 percent of sites, and 29 percent pre-selected privacy-unfriendly settings, requiring users to actively untick boxes to protect themselves. Each of these designs exploits well-documented quirks of human cognition, including the tendency to click prominent, brightly coloured buttons and to accept default options rather than modify them.

To test whether these designs actually change behaviour, rather than merely correlating with poor privacy outcomes, the researchers conducted a controlled online experiment. A sample of 615 UK online gamblers were presented with a simulated betting website carrying one of six different consent banners. The design most commonly used across the gambling industry made participants three to four times more likely to accept tracking than a neutral, one-click alternative. This is a striking effect size for a single interface element, and it demonstrates that the industry’s dominant banner style is not a passive or accidental feature. It functions, in the researchers’ framing, as an active nudge toward the least private option available.

Perhaps the most revealing result concerned how participants felt about their own decisions. Those who accepted tracking rated their choice as a far poorer reflection of their real privacy preferences than those who rejected it, scoring the alignment at 4.4 out of 10 compared with 7.9. In other words, people who accepted tracking under the industry-standard design knew, at some level, that the decision did not represent what they actually wanted. The design, rather than the user, was driving the outcome. Notably, the effect was the same regardless of participants’ level of gambling risk, meaning that both recreational gamblers and those at elevated risk of harm were equally susceptible to the manipulative layouts.

Under GDPR standards, consent is only valid when it is freely given, specific, informed and unambiguous, and it must be as easy to withdraw as it was to give. A consent obtained through a design that makes refusal disproportionately difficult arguably fails the freely given test, which is why the researchers characterise the overwhelming majority of audited sites as non-compliant rather than merely unfriendly. Regulators including the UK Information Commissioner’s Office have previously warned against consent banners that nudge users toward acceptance, but this study provides the first systematic, industry-wide quantification of the problem within gambling, a sector whose business model depends heavily on data-driven customer acquisition and retention.

The stakes extend well beyond data protection compliance. The researchers argue that the data harvested through these designs underpins the personalised marketing and cross-web tracking of gambling customers, and that the characteristics used to identify commercially valuable players overlap substantially with the behavioural markers of gambling harm. In practical terms, the same signals that flag someone as a profitable target, such as frequent sessions, rapid betting patterns and responsiveness to promotions, are also the signals associated with problematic play. Professor Simon Dymond, who supervised the research alongside Dr Martyn Quigley and Dr Jamie Torrance, noted that the behavioural data being harvested is not neutral, and that getting consent right is not just a data protection issue for the industry but an important part of preventing gambling harm.

Jack McGarrigle, the PhD student who led the study, described the audit’s findings as stark, observing that most sites are not giving customers a fair choice about tracking, with some making it a single click to accept and up to fifteen to refuse. He added that the follow-up experiment showed the effect is not incidental, and that the banners work exactly as one would expect, nudging people toward decisions they do not actually agree with. The transparency of the research itself is notable: the data, pre-registration materials and screenshots of all 624 audited sites have been made publicly available through the Open Science Framework, allowing other researchers, regulators and journalists to verify the findings independently.

The study arrives at a moment of intensifying scrutiny of both the gambling industry and the digital advertising ecosystem that sustains it. As regulators weigh how to enforce consent rules against operators whose interfaces are built to circumvent them, the Swansea findings supply a detailed evidentiary baseline: a complete census of a regulated national market, a taxonomy of the dark patterns in use, and experimental proof that those patterns shift real decisions. Whether the response takes the form of enforcement action, mandatory interface standards, or redesign of the consent framework itself, the research makes clear that the current system, in which nine in ten licensed operators fail to offer a fair choice, is not a marginal compliance gap but a structural feature of how the online gambling industry acquires its data.

Subject of Research: GDPR compliance and dark-pattern cookie consent design on UK online gambling websites

Article Title: Nine in 10 UK gambling websites breaching data privacy law, study finds

Article References: Nine in 10 UK gambling websites breaching data privacy law, study finds. (n.d.). Original publication

Image Credits: AI Generated

DOI: Not provided

Keywords: GDPR, online gambling, cookie consent, dark patterns, data privacy, Swansea University, Gambling Commission, behavioural experiment, gambling harm, digital tracking, consent banners, UK regulation

The study, conducted by Jenny Blythe of the London School of Hygiene and Tropical Medicine as part of a doctoral thesis, drew on the Gambling Commission’s online register of gambling premises, the authoritative record of venues licensed by local authorities under the Gambling Act 2005. Every land-based gambling venue in Great Britain requires such a license, and the legislation contains a statutory “aim to permit” gambling unless an application conflicts with the Act’s licensing objectives: preventing crime and disorder, ensuring gambling is conducted fairly and openly, and protecting children and vulnerable people from harm. Because licensing decisions are made at borough level, the analysis examined whether deprivation at that same level was associated with changes in premises counts.

The raw numbers tell a story of modest contraction. London’s total stock of gambling premises fell from 1,516 in December 2020 to 1,478 in December 2025, a net reduction of 38 venues. Licensed betting offices, the familiar high-street bookmakers, declined by 74 premises, from 1,313 to 1,239. Casinos fell from 36 to 31, and family entertainment centres nearly vanished, dropping from two to a single venue. Yet two categories moved in the opposite direction: adult gaming centres, the arcades packed with slot machines, rose from 127 to 150, while bingo outlets expanded substantially from 38 to 57. Taken together, these figures suggest not a simple shrinkage of land-based gambling but a shift in its composition, with machine-heavy arcades and social bingo venues filling the space vacated by bookmakers.

The deprivation analysis is where the picture sharpens. Using the 2019 Index of Multiple Deprivation, the official baseline measure of relative deprivation in England, Blythe compared the eight most deprived boroughs with the eight least deprived. The most deprived quartile saw its gambling premises increase from 425 to 430 over the study period, while the least deprived quartile fell from 323 to 312. To quantify the widening gap, the study plotted each borough’s total premises count against its deprivation rank and fitted a linear trendline using ordinary least squares regression. The slope of that line, a summary measure of the association between deprivation and gambling availability, rose from 0.1082 in 2020 to 0.1546 in 2025, an increase of roughly 43 percent. In plain terms, the more deprived a borough became in rank, the more gambling premises it tended to host, and that gradient steepened year after year.

Betting shops illustrate the pattern most starkly. Although bookmakers declined across London, the decline was strikingly uneven. In the 25 percent most deprived boroughs, betting shop numbers fell by just 10 venues, from 392 to 382. In the 25 percent least deprived boroughs, they fell by 22, from 289 to 267. The result is a paradox with public health consequences: betting shops are disappearing from the capital, but they are disappearing disproportionately from its affluent neighbourhoods, becoming ever more concentrated in communities already carrying the heaviest burden of deprivation. This directly challenges a commonly cited narrative that falling betting shop numbers, often linked to the 2019 reduction in stakes on Fixed Odds Betting Terminals, automatically translate into reduced gambling exposure for the population at large.

The context of the 2019 stake change matters. Fixed Odds Betting Terminals, the electronic machines that once allowed stakes of up to £100 per spin, had their maximum stake cut to £2 in April 2019, prompting the Gambling Commission to predict significant betting shop closures. The pandemic then forced prolonged shutdowns of gambling premises in 2020 and 2021, while the government launched a review of gambling legislation intended to make it “fit for the digital age.” Any of these developments might plausibly have been expected to reduce the physical gambling footprint, particularly in vulnerable communities. Instead, the concentration of premises in deprived boroughs continued to climb throughout the period, suggesting that market forces and licensing decisions were reshaping the geography of gambling in ways that policy interventions had not anticipated.

The expansion of arcades and bingo venues deserves particular scrutiny. Adult gaming centres grew in both deprived and affluent boroughs, rising from 26 to 33 in the most deprived quartile and from 28 to 31 in the least deprived. Bingo premises grew even faster, from eight to 14 in the most deprived boroughs and from four to 11 in the least deprived. Unlike betting shops, bingo did not show a markedly widening deprivation gap, but overall availability increased considerably across the capital. Because gambling harms, which include financial difficulties, relationship breakdown, mental and physical health problems, educational and employment impacts, and criminal activity, are known to fall unequally on people in deprived areas, the growth of machine-based venues in poorer neighbourhoods raises questions about whether the current licensing framework is equipped to protect those most at risk.

The study has limitations that its author acknowledges candidly. The analysis relies on data supplied by local authorities and published by the Gambling Commission, which itself states that it cannot guarantee the completeness or accuracy of its register, a position the paper describes as concerning for a regulator charged with enforcing objectives that include protecting the vulnerable. Changes in reporting practices may also affect comparisons over time, and the analysis was not adjusted for population size, demographic characteristics or geographical area, meaning it cannot determine individual exposure to gambling opportunities. Casinos, which are concentrated in a small number of largely central London boroughs, were excluded from deprivation comparisons because factors such as tourism, entertainment activity and commercial property markets likely shape their locations more strongly than deprivation does.

Even with those caveats, the findings align with a substantial body of evidence showing that gambling availability and gambling harms cluster in disadvantaged communities, and they carry direct policy implications. London is home to roughly 13 percent of Great Britain’s population but contains approximately a quarter of all land-based gambling premises, and the capital is estimated to have some of the highest levels of gambling-related treatment need in England. The UK government has recently announced its intention to remove the “aim to permit” provision from the Gambling Act, a change that would shift the default posture of licensing authorities from allowing gambling unless harm is demonstrated to a more precautionary stance, though no timeframe has been provided. As policymakers weigh that reform, the London data offer a clear warning: the physical gambling environment is not simply shrinking, it is migrating toward the communities least able to absorb its harms, and future gambling policy will need to address the location and concentration of land-based venues, not only the rapidly growing online sector, if it is to meaningfully reduce health inequalities.

Subject of Research: Changes in the number, type and deprivation-related distribution of land-based gambling premises across London boroughs between 2020 and 2025

Article Title: Changes in land-based gambling premises in London, Great Britain, 2020–2025

Article References: Blythe, J. (2026). Changes in land-based gambling premises in London, Great Britain, 2020–2025. Public Health in Practice, 12, Article 100858. https://doi.org/10.1016/j.puhip.2026.100858

Image Credits: AI Generated

DOI: 10.1016/j.puhip.2026.100858

Keywords: gambling, public health, London, deprivation, betting shops, adult gaming centres, bingo, Gambling Act 2005, health inequalities, gambling harms, licensing policy, Gambling Commission