Sharing a betting account with a friend or relative: the risks

Kenyan law builds a betting account around one registered, verified adult. The Gambling Control Act, 2025 has no provision for joint or shared accounts, so a second person using your login is unrecognised by the rules and can cause failed payouts, cancelled registration and loss of control of your data.

By WebTech Kenya Editorial (prepared with AI tools under our editorial policy) · Last updated 2026-11-12

The short answer

A betting account in Kenya is designed for one person. The Act requires that nobody takes part as a player unless they are registered and hold an account with the licensee (s.72(1)), and it requires proof of age of majority before the registration of every player (s.72(3)). Nothing in the text creates a joint or household account.

That matters in practice because the same rules decide who can be verified, who is paid and whose data is held. The related question of using another adult's ID at registration is covered in registering a betting account with someone else's ID. This guide deals with the next step: an account opened honestly in your name, then used by someone else. Gambling is addictive, and online gambling is for adults aged 18 and over.

What the rules attach to one account

Read together, the provisions describe an account that can be traced to one verified adult. Whether an operator's own terms also forbid sharing was not read for this guide, so this article does not assert it.

Five risks of sharing

1. A payout that stalls

   Winnings need the winner's identity verified (r.85(3)) and, under s.70(6), proof of age before remittance to the registered player. If the person who placed the bets is not the person on the record, you may be unable to show who the winner is. How payment timing works is explained in prize payment and withdrawal timelines.

2. Lost control of the login

   Once a password or code is passed on, you cannot tell who else sees it. A friend may write it down, save it on a phone or pass it on, and a leak of that kind is hard to trace. Strong, unshared credentials are covered in setting a strong betting account password and PIN.

3. Money from other people's wallets

   Shared use tends to mean shared payments, with the other person depositing from their own mobile money. That raises its own questions, set out in depositing from someone else's M-Pesa to a betting account.

4. Self-exclusion and age protections bypassed

   Verification must confirm that the individual is not self-excluded and is legally eligible (r.85(4)). If the person using the account is excluded or under 18, those checks have not been applied to them. If a person has chosen to stop gambling, the support routes are on the responsible gambling page.

5. A muddled record

   Device history and login alerts help you spot activity you did not do. When two people use one account, every alert becomes ambiguous. See betting login alerts and device history.

Where mobile money and one-time codes fit

Regulation 49(c) asks licensees to use multi-factor authentication, such as one-time passwords or biometric verification, to prevent unauthorised payments, in the context of promotions. Regulation 88(1) requires all financial transactions to go through a secure payment gateway. These controls work only if the code goes to the person it was meant for.

If a one-time code is sent to your phone and you read it out to a friend, the control has been handed over. Treat the code and your M-Pesa PIN as yours alone. This guide did not read a Safaricom page for this point, so it makes no statement about Safaricom's terms.

Illustrative example

Illustrative example: Wanjiru registers an account in her own name. She deposits KES 1,000. Her cousin Otieno, using her login, adds KES 500 from his own phone, so the single balance is 1,000 + 500 = KES 1,500. Otieno then places bets totalling KES 700, leaving 1,500 - 700 = KES 800.

The account shows one balance of KES 800 under Wanjiru's name. Section 73(2) credits funds to the registered player's account and the rules provide no way to split it between two people. If the cousins disagree about who is owed what, the account record does not settle it, because it records no second holder. The amounts are invented to show the arithmetic only.

Safer ways to help someone you care about

• An adult who wants an account registers with their own documents, as the guide on proof of age and identity checks describes.
• Do not lend your phone unlocked with the app open.
• Change a password you have shared, and follow the steps in what to do if a betting account is hacked if you see activity you did not do.
• Ask the operator for the data it holds on your account if you suspect misuse. The ODPC lists the right of access among a data subject's rights.

This guide is information about the published rules and is not legal advice. Play responsibly. The GRA toll-free line and support options are on the responsible gambling page.