The headline figure of 86 percent non-compliance conceals a range of distinct violations, each of which carries its own legal weight under European and British data protection law. Two-thirds of the audited sites, 67 percent, began collecting personally identifiable information before users had given any consent at all, transmitting unique user identifiers to third-party analytics and marketing platforms. Under the GDPR and the UK GDPR, consent must be obtained before non-essential cookies are placed on a user’s device, so this practice constitutes a direct infringement rather than a technicality. In effect, the most commercially valuable data flows were already underway while the consent banner was still sitting on the screen, unread and unclicked.

Denial of choice was another widespread problem. Almost a quarter of the sites, 24 percent, offered users no way to refuse tracking whatsoever, and 2 percent displayed no consent banner at all, despite the legal requirement to do so. Even where a reject option technically existed, exercising it could be an ordeal. Only 29 percent of banners allowed users to reject tracking as easily as they could accept it, and on some sites it took as many as fifteen clicks to refuse consent, compared with the single click required to accept. The asymmetry is not subtle. A user who wants to protect their privacy must navigate layered menus and buried settings, while a user willing to be tracked resolves the interaction instantly.

The study catalogued these manipulative layouts under the umbrella term dark patterns, a phrase coined in user-experience research to describe interface designs that steer people toward choices they would not otherwise make. The audit found most banners employed at least one such technique. Visual emphasis of the accept button appeared on 60 percent of sites, making the compliant option the most eye-catching element on screen. Hiding the reject option behind a second layer of navigation occurred on 47 percent of sites, and 29 percent pre-selected privacy-unfriendly settings, requiring users to actively untick boxes to protect themselves. Each of these designs exploits well-documented quirks of human cognition, including the tendency to click prominent, brightly coloured buttons and to accept default options rather than modify them.

To test whether these designs actually change behaviour, rather than merely correlating with poor privacy outcomes, the researchers conducted a controlled online experiment. A sample of 615 UK online gamblers were presented with a simulated betting website carrying one of six different consent banners. The design most commonly used across the gambling industry made participants three to four times more likely to accept tracking than a neutral, one-click alternative. This is a striking effect size for a single interface element, and it demonstrates that the industry’s dominant banner style is not a passive or accidental feature. It functions, in the researchers’ framing, as an active nudge toward the least private option available.

Perhaps the most revealing result concerned how participants felt about their own decisions. Those who accepted tracking rated their choice as a far poorer reflection of their real privacy preferences than those who rejected it, scoring the alignment at 4.4 out of 10 compared with 7.9. In other words, people who accepted tracking under the industry-standard design knew, at some level, that the decision did not represent what they actually wanted. The design, rather than the user, was driving the outcome. Notably, the effect was the same regardless of participants’ level of gambling risk, meaning that both recreational gamblers and those at elevated risk of harm were equally susceptible to the manipulative layouts.

Under GDPR standards, consent is only valid when it is freely given, specific, informed and unambiguous, and it must be as easy to withdraw as it was to give. A consent obtained through a design that makes refusal disproportionately difficult arguably fails the freely given test, which is why the researchers characterise the overwhelming majority of audited sites as non-compliant rather than merely unfriendly. Regulators including the UK Information Commissioner’s Office have previously warned against consent banners that nudge users toward acceptance, but this study provides the first systematic, industry-wide quantification of the problem within gambling, a sector whose business model depends heavily on data-driven customer acquisition and retention.

The stakes extend well beyond data protection compliance. The researchers argue that the data harvested through these designs underpins the personalised marketing and cross-web tracking of gambling customers, and that the characteristics used to identify commercially valuable players overlap substantially with the behavioural markers of gambling harm. In practical terms, the same signals that flag someone as a profitable target, such as frequent sessions, rapid betting patterns and responsiveness to promotions, are also the signals associated with problematic play. Professor Simon Dymond, who supervised the research alongside Dr Martyn Quigley and Dr Jamie Torrance, noted that the behavioural data being harvested is not neutral, and that getting consent right is not just a data protection issue for the industry but an important part of preventing gambling harm.

Jack McGarrigle, the PhD student who led the study, described the audit’s findings as stark, observing that most sites are not giving customers a fair choice about tracking, with some making it a single click to accept and up to fifteen to refuse. He added that the follow-up experiment showed the effect is not incidental, and that the banners work exactly as one would expect, nudging people toward decisions they do not actually agree with. The transparency of the research itself is notable: the data, pre-registration materials and screenshots of all 624 audited sites have been made publicly available through the Open Science Framework, allowing other researchers, regulators and journalists to verify the findings independently.

The study arrives at a moment of intensifying scrutiny of both the gambling industry and the digital advertising ecosystem that sustains it. As regulators weigh how to enforce consent rules against operators whose interfaces are built to circumvent them, the Swansea findings supply a detailed evidentiary baseline: a complete census of a regulated national market, a taxonomy of the dark patterns in use, and experimental proof that those patterns shift real decisions. Whether the response takes the form of enforcement action, mandatory interface standards, or redesign of the consent framework itself, the research makes clear that the current system, in which nine in ten licensed operators fail to offer a fair choice, is not a marginal compliance gap but a structural feature of how the online gambling industry acquires its data.

Subject of Research: GDPR compliance and dark-pattern cookie consent design on UK online gambling websites

Article Title: Nine in 10 UK gambling websites breaching data privacy law, study finds

Article References: Nine in 10 UK gambling websites breaching data privacy law, study finds. (n.d.). Original publication

Image Credits: AI Generated

DOI: Not provided

Keywords: GDPR, online gambling, cookie consent, dark patterns, data privacy, Swansea University, Gambling Commission, behavioural experiment, gambling harm, digital tracking, consent banners, UK regulation

The technique at the heart of the study is technically straightforward. Online gambling operators offer free bets as promotional incentives to draw in new customers. Matched bettors exploit these offers by placing opposing bets on all possible outcomes of the same event, such as a football match, so that whichever side wins, the outcome is largely balanced out. When executed perfectly with precise stake calculations, the mathematics can indeed neutralise most of the variance that defines conventional gambling, allowing the bettor to convert the value of the free bet into cash. It is this apparent elimination of chance that underpins the widespread online framing of matched betting as a controlled income stream or side hustle rather than a form of gambling.

To test how that framing holds up in practice, the research team surveyed 2,112 UK adults currently engaged in matched betting and analysed 2,954 personal accounts in which participants described whether they considered matched betting to be gambling, the difficulties they had encountered, and the losses they had experienced. The study was conducted by a team of Bournemouth University researchers including Dr Reece Bush-Evans, Dr Helen England, Dr Elvira Bolat, Dr Emily Arden-Close and Dr Ruijie Wang. The combination of a large quantitative survey with a substantial body of qualitative narrative material allowed the researchers to examine both the scale of losses and, crucially, the ways people explained those losses to themselves and others.

The contradiction between perception and experience was, according to the authors, one of the most striking findings of the research. Many participants described matched betting as risk-free or controllable, yet just over half reported having lost money while doing it. This dissonance was not simply ignored by the bettors themselves. Instead, participants developed explanatory frameworks that preserved their belief in the fundamental safety of the activity, a pattern the researchers link to well-documented cognitive mechanisms such as the illusion of control, in which people overestimate their ability to influence outcomes in situations that involve chance.

The way losses were attributed is central to this psychological picture. More than half of those surveyed reported losing money through matched betting, but the losses were commonly attributed to mistakes such as incorrect calculations, misunderstanding the terms of promotions, or pressing the wrong button, rather than to any risk inherent in the activity itself. In other words, when the system failed, participants blamed the operator of the system rather than the system. Dr Ruijie Wang, one of the study’s authors, noted that what the team found particularly interesting was that losses did not necessarily undermine people’s belief that matched betting was risk-free. The theory remained intact even when the lived experience contradicted it, because errors were classified as personal lapses in execution rather than evidence of underlying risk.

Participants also frequently drew a sharp conceptual line between matched betting and conventional gambling. Because the technique involves hedging both sides of an event, many bettors insisted that what they were doing was fundamentally different from betting on a football match or spinning a slot machine. Yet their own accounts told a more complicated story. Alongside financial losses, the narratives described gambling-related harms including mistakes, mental strain and emotional impulses. The stress of monitoring odds, meeting the qualifying conditions of promotions and executing multiple bets correctly emerged as a genuine psychological burden, even among people who maintained that the activity carried no risk.

Perhaps most concerning for gambling researchers, some participants described behaviours that closely resemble recognised patterns of problematic gambling. These included chasing wins or losses, committing additional personal money beyond the promotional free bets, and in some cases moving from matched betting into other gambling activities altogether. The research team is careful to note an important methodological limitation: the study captured people’s experiences at a single point in time, and therefore cannot establish whether matched betting causes later gambling behaviour. The cross-sectional design means the direction of any relationship between matched betting and subsequent gambling remains an open question for future longitudinal research.

Nevertheless, the authors argue that the framing of matched betting as a financial strategy rather than gambling may itself carry risks. People who regard the activity as a side hustle or income stream may be less likely to recognise potentially harmful gambling behaviours in themselves, precisely because their self-image excludes the category of gambler. If losses are always attributed to avoidable mistakes and the activity is always defined as risk-free, the psychological warning signs that might otherwise prompt reflection are systematically explained away. This has implications for consumer protection, since individuals who do not identify as gamblers are unlikely to seek gambling-specific support or to respond to harm-reduction messaging aimed at that identity.

The researchers argue that matched betting deserves far greater attention in gambling research and in consumer-protection discussions than it has so far received. Dr Reece Bush-Evans, who led the study, observed that matched betting remains surprisingly under-researched despite its considerable visibility online, where communities, tipsters and affiliate marketers actively promote it to new audiences. The team has called for further research that follows matched bettors over time and examines how the practice is promoted through social media, online communities and affiliate marketing networks, channels through which the risk-free narrative is disseminated and reinforced at scale.

The findings arrive at a moment when the boundaries between gambling, financial speculation and online hustle culture are increasingly blurred, and when regulators in several jurisdictions are scrutinising how gambling products are marketed to young adults. By documenting that a majority of matched bettors in a large UK sample had experienced losses while simultaneously maintaining a belief in the risk-free nature of the activity, the study provides empirical grounding for a suspicion long held by gambling researchers: that the language of control and certainty surrounding matched betting may function as a shield against both self-awareness and regulation. The work suggests that any serious conversation about gambling harm in the digital economy must include the promotional ecosystems built around free bets, and the thousands of people who believe, sometimes against their own experience, that the rules guarantee there is no risk so long as those rules are followed.

Subject of Research: Perceptions of risk and experiences of loss among adults engaged in matched betting in the United Kingdom

Article Title: Study challenges perception of matched betting as “risk-free” income

Article References: Study challenges perception of matched betting as “risk-free” income. (n.d.). Original publication

Image Credits: AI Generated

DOI: Not provided

Keywords: matched betting, gambling harm, risk perception, illusion of control, free bets, online gambling, consumer protection, gambling research, UK adults, financial losses, International Gambling Studies, affiliate marketing