Why a betting account is locked or restricted, and what to do
A lock or restriction usually traces to a duty the law places on the operator: proving age and identity (Act s.72), acting on false details, enforcing self-exclusion, or reporting suspicious activity. Terms differ by operator, so read the notice on the account and answer through the official channel.
A lock is usually a duty, not a punishment
A locked account blocks logins or transactions. A restricted account still opens but limits something, such as withdrawals or new deposits. Most causes link back to checks that the proof of age and identity rules and the operator's control system require of a licensee.
The sources read are the Gambling Control Act, 2025 and the Conduct of Gambling Operations Regulations, 2026. They say what an operator must do. They do not list every reason an operator may lock an account, and they give no standard lock period. Terms differ by operator, so the operator's published rules govern the details.
Reasons and the rule behind each
| Category | What the operator may be doing | Rule behind it |
|---|---|---|
| Age or identity not proven | Holding the account until proof of age of majority is supplied | Act s.72(3); Ops Regs r.85(1)-(2) |
| False or mismatched details | Cancelling the registration | Act s.72(5) |
| Winner check before payment | Pausing a payout until identity and eligibility are confirmed | Ops Regs r.85(3)-(4) |
| Self-exclusion | Closing the account and returning funds | Act s.115(4); Ops Regs rr.73, 74 |
| Operator-initiated exclusion | Excluding a person showing harm, financial strain, risk or lack of capacity | Ops Regs rr.75, 76, 97(5) |
| Suspicious activity or fraud | Reviewing and reporting to the Authority | Ops Regs rr.93, 98 |
| Prohibited participant | Refusing a child or a person excluded or lacking legal capacity | Ops Regs r.94 |
| Anonymous or virtual asset use | Refusing the transaction | Ops Regs r.86 |
Identity, age and false details
Section 72(1) says a licensee shall not let anyone play unless the person is registered and holds an account, and s.72(3) requires proof of age of majority before every registration. Regulation 85(1) bars online play without identity, location and age assurance checks, and r.85(2) requires reliable, independent and electronically verifiable data sources before account activation and any wagering deposit.
Know-your-customer verification of all punters is also mandatory under regulation 98(2), tied to the Proceeds of Crime and Anti-Money Laundering Act. If your registered name differs from your ID, the check can fail; the guide on a name that does not match your ID or SIM explains the comparison.
Section 72(5) is the strictest rule here: on becoming aware of false information given at registration, the licensee shall immediately cancel the registration. That applies to an account opened on another person's details as well.
Self-exclusion and operator-initiated exclusion
Under section 115 of the Act, a person who enters a self-exclusion agreement is excluded from online gambling, and the licensee must close the account and return the funds held. Regulation 73(3) requires daily checks against the register, and r.73(2) requires systems that automatically block gambling by excluded persons. If you do not remember excluding yourself, check with the operator rather than assuming an error.
Regulation 75 lets an operator start an exclusion where it reasonably believes a gambler shows signs of compulsive or harmful gambling, is gambling beyond apparent means, poses a risk to integrity, or lacks legal capacity. It must tell the Authority within twenty-four hours. Regulation 76 requires the decision to be in writing with reasons, proportionate, and open to review by the Authority.
Security and fraud controls
Regulation 98(1) requires internal control systems to detect and prevent money laundering, terrorism financing and fraud. Regulation 93(1) requires suspicious activity and fraud to be reported to the Authority within twenty-four hours of the licensee becoming aware. Repeated logins from new devices, or payments that do not fit the account, are the kind of pattern an operator would need to review, though the sources do not say which triggers any operator uses.
If the lock followed a login you did not make, see the guide on what to do if a betting account is hacked. Data held for these checks must follow the Data Protection Act (regulation 96(1)).
What happens to your balance
Section 75 limits a licensee to three things with the money in your account: debit wagers you direct, remit funds at your request, or pay bank charges for deposits and withdrawals. Section 76 requires player money to be held in a bank or mobile money account. A lock changes access, not who the money belongs to. A withdrawal held for a winner check is covered in holding winnings pending verification.
What to do
- Read the notice and the operator's rules
Note the exact wording, the date and any reference number. Take screenshots before anything changes.
- Match the cause to the table
Identity, details, exclusion, security or payout check. The cause decides which document or step is needed.
- Answer through the official channel only
Use the app or the contact details shown inside your account. A message asking for your PIN, a "release fee" or an OTP is not a verification step; see how to recognise betting phishing SMS.
- Ask for the reason in writing
Section 68(8) requires an online operator to maintain a customer care centre in Kenya. Regulation 103 requires an approved internal dispute resolution mechanism.
- Escalate
If the operator does not resolve it, the regulator's toll-free line is 0800-723-770. The sources read do not set a deadline for the operator to lift a lock.
Illustrative example: an account holds KES 3,500 when it is closed on self-exclusion. Under s.115(4)(d) the licensee closes the account and returns the funds held, so the KES 3,500 is returned, not kept. Gambling is addictive: play responsibly, and the responsible gambling page lists support.
Questions and answers
Can an operator lock my account without telling me why?
The sources read do not set out a general notice rule for account locks. For operator-initiated exclusion, regulation 76 requires the decision to be documented in writing with reasons, and the Authority notifies the excluded person with reasons. For other locks, read the operator's published rules and ask customer care for the reason in writing.
Is my money safe while the account is locked?
Section 75 of the Act limits what a licensee may do with money standing to the credit of a player's account: debit wagers you direct, remit funds at your request, or pay bank charges. Section 76 requires player money to be held in a bank account or mobile money account. A lock does not by itself give the operator other rights over the balance.
Why was my account closed after I gave a wrong detail at registration?
Section 72(5) of the Act says that where a licensee becomes aware that a person gave false information during registration, it shall immediately cancel the registration. Correcting an honest mistake early, through the operator, is a separate matter from deliberate false information.
Does self-exclusion lock the account?
Yes. Section 115(4)(d) of the Act requires the licensee to close the customer account of a person who has entered a self-exclusion agreement and return the funds held. Regulation 70(7) bars a person on the register from placing a bet, opening an account or claiming winnings.
Can the regulator reverse a lock on my account?
The sources read give no power for the Authority to reverse an operator's account decision on request. They do give a review role for operator-initiated exclusions (regulation 76(1)(c)). The regulator's toll-free line is 0800-723-770.
What if I think someone else got into my account?
Treat it as a security incident first. Change the password, check devices and recent activity, and tell the operator. The guide on a hacked betting account lists the steps.