How to ask a betting operator to delete your account and personal data

Withdraw any balance, then send the operator a written request that separates closing the account from erasing the data. Expect it to keep some records its licence conditions require. If it does not answer properly, a data subject can complain to the Office of the Data Protection Commissioner.

By WebTech Kenya Editorial (prepared with AI tools under our editorial policy) · Last updated 2026-10-05

Closing an account and erasing data are two requests

Closing an account ends your access to it. Erasure is about the personal data the operator holds: name, phone number, ID details, transaction history and anything collected during identity and proof-of-age checks. Operators often treat these as separate steps, so ask for both in plain words.

Under the Gambling Control Act an online operator must run under an approved gambling control system, and that system must include data protection measures under the Data Protection Act (s.68(2)(h)). The operator is therefore expected to have a process for data requests, and its privacy statement is the place to find it. The vocabulary used below is explained in the guide to personal data terms for gambling accounts.

Before you send the request

1. Withdraw the balance to your own mobile-money number or bank account, and keep the confirmation messages. Once the account is closed, getting a balance back can become harder.
2. Save statements of deposits, withdrawals and bets for the period you want to keep. Download them while you still have access.
3. Find the privacy statement and the data contact in the operator's terms. Use the address or form it names. The licensing application forms ask for a data protection certificate and a data protection policy, so a licensed operator should have both.
4. Do not rely on unsubscribing from messages alone. Put the marketing instruction in the written request.

What to put in the request

Use one message and keep the wording factual. The regulations read for this guide set no reply deadline for this kind of request, so look in the operator's own terms for a timeline and quote it back if it is missed.

Sending it safely

Use only the contact route printed in the operator's own terms or in your logged-in account. A message that arrives by SMS offering to "process your deletion" if you click a link or share a code is not that route. Never share a one-time code, a PIN or a mobile-money password to prove who you are, because no legitimate data request needs them.

If you registered with a different phone number from the one you use now, say so in the request and offer to confirm details the operator already holds, such as the registered name. That keeps the identity check short without sending new copies of documents unless the operator explains why they are needed.

What the operator may keep

Deletion is rarely total. The conduct regulations list "customer information" among the records a licensee must keep and maintain (r.92(1)(j)), and make it mandatory to verify the identity of all punters under the Proceeds of Crime and Anti-Money Laundering Act (r.98(2)). Records of that kind can legitimately outlast your account.

The sections read for this guide state no retention period. Ask the operator to state its own period and the purpose. Regulation 96(2) limits collection and processing to purposes directly related to administering the gambling operation, which is a fair basis for asking why any other data is retained.

When an operator stops trading

You may not need to ask at all. A licensee winding up must give the Authority at least ninety days' written notice that includes the method for refunding deposits, settling winnings and disposing of personal data (r.99(1)-(2)). If a licence is revoked, the licensee must safeguard player deposits and personal data, and where the Authority takes over the business, hand over the database and then erase its own copy as the Authority specifies (Licensing Regulations r.26(5)-(6)).

If the request is ignored or refused

First, reply in writing, quoting your earlier message and asking for the operator's reasons. If that fails, a data subject can complain to the Office of the Data Protection Commissioner. Its page says the complaint form is filed online, that supporting documents should be annexed, and that written authorisation is needed to file for someone else. The page cites section 56 of the Data Protection Act as the basis for the complaint.

Keep the complaint apart from any dispute about a balance or a bet, which is a gambling matter, not a data matter.

Leaving versus self-exclusion

Deleting an account only affects that operator. Section 115 of the Gambling Control Act lets a person who finds gambling harmful enter a self-exclusion agreement with a licensee covering all gambling, including online. The person must notify the Authority, which keeps a register and tells all licensees. If the reason for leaving is that gambling is causing harm, that route and the support on the responsible gambling page are the relevant ones. Gambling is addictive: play responsibly, and only if you are 18 or over.

After the account is gone

Check that the operator's SMS and calls stop, and treat unexpected messages that claim to be the operator with suspicion. The guide on protecting accounts from SIM swap covers securing your phone line, and the explanation of the gambling control system shows where data protection sits in an operator's obligations.