The UK’s data protection regulator, the Information Commissioner’s Office (ICO), has taken action against an online gambling company for unlawfully processing consumer data. Bonne Terre Limited, trading as Sky Betting and Gaming, has been reprimanded by the ICO for their actions.
According to the ICO, between January 10 and March 3, 2023, Sky Betting and Gaming processed personal information as soon as users visited the SkyBet site and shared it with advertising technology companies. This was done before users had the opportunity to accept or reject advertising cookies, potentially allowing their personal information to be used for targeted advertising without their consent.
The investigation was prompted by a complaint from the group Clean Up Gambling, concerned about the potential targeting of vulnerable gamblers. While the ICO found no deliberate misuse of data, they concluded that Sky Betting and Gaming’s processing of personal data through cookies was not lawful, transparent, or fair.
One of the companies contracted by Bonne Terre, Media Math, used a pixel on the SkyBet site to set third-party marketing cookies on visitors’ devices without their consent. This led to personal data being processed by AdTech Vendors without valid consent. The issue was brought to Bonne Terre’s attention on March 2, 2023, and was rectified by the following day.
The ICO issued a reprimand to Bonne Terre, reminding them to review and monitor their processes to ensure non-essential tags and cookies are only used with consent. ICO deputy commissioner Stephen Bonner emphasized the importance of organizations complying with the law to give people the choice over targeted advertising.
As the ICO cracks down on websites using personal data without proper consent, this enforcement action serves as a warning to other organizations that there will be consequences for breaching data protection laws. It emphasizes the importance of respecting individuals’ privacy rights and ensuring transparency in data processing practices.