Why a betting site or app checks your location
The Operations Regulations, 2026 require a licensed online platform to use geo-location technology able to block access from prohibited locations (r.41), and to run a location check before a person takes part (r.85(1)). The text read does not say which technology to use, so the method varies by operator.
The short answer
A licensed online betting platform in Kenya has to know whether you are somewhere gambling is permitted. The Conduct of Gambling Operations Regulations, 2026 turn that into two duties: the platform must use geo-location technology to block access from prohibited locations, and it must verify location before it lets a person take part. The same rule covers identity and age, which are explained in the guide on proof of age and identity checks.
This guide reads the law text first, then explains in general terms how a location check can work and how to control location access on your own phone. Phone settings are described only as the official Google and Apple support pages describe them.
What the regulations say
Regulation 2 defines "geo-location technology" as a system capable of accurately determining the physical location of a player to ensure gambling only occurs within permitted jurisdiction. Regulation 41 lists minimum standards for an online gambling system or platform, and one of them is robust geo-location technology able to block access from prohibited locations. Regulation 85(1) says a licensee shall not allow a person to take part in any form of online gambling without a mandatory identity check, location verification and age assurance check.
Regulation 85(2) adds that verification must use reliable, independent and electronically verifiable data sources, before the player account is activated and before any wagering deposit is received. The text read does not say how location is to be verified. It names no technology, no accuracy figure and no frequency of re-checking.
What the law text does not prescribe
The Gambling Control Act, 2025 requires a licence for a person who wants to operate, sell or promote online gambling in Kenya (s.67(1)). A foreign-based operator can receive an online licence only if it is registered in Kenya and has a registered physical address in Kenya, among other conditions (s.79(1)). The Act sections read do not describe location technology.
The licensing regulations include an application form for gambling software or platform authorization (Form 12). Its section D2, "Underage and Location Prevention", asks the applicant to describe its geolocation assurance tools. So the method is described by the operator in its application, and the published form does not fix the answer. For how the regulator's monitoring link works, see the guide on whether the regulator can see your account in real time.
How a location check can work in general
Because the law is silent on method, this section is general explanation, not a statement about any named operator. Android's help page says a phone works out location using GPS satellites, Wi-Fi access points and mobile networks, and that Google's Location Accuracy service combines those signals with sensor data. A platform can ask the phone for that result, or it can look at the network connection, or both.
| Signal | What it can show | Common weakness |
|---|---|---|
| Device location (GPS, Wi-Fi, mobile network) | A position from the phone, if you allow the permission | Needs permission; weaker indoors |
| Internet connection address (IP) | A rough area tied to the network | Coarse; a connection can route through another place |
| Account and identity data | Registered identity and phone number | Shows who you are, not where you are now |
The weaknesses in the right-hand column are general reasoning, not rules from the regulations. They explain why a platform that must block prohibited locations tends to ask for the phone's own location. The same logic explains why a check can fail for a person who is in Kenya, for example indoors with a poor signal.
What this means for the permission prompt
A location prompt in a licensed app can have a genuine purpose, which is the point made in the guide on betting app permissions. It does not make every permission reasonable. The regulations connect location to the duty to block prohibited locations, not to reading messages or contacts.
A betting site in a browser asks in a similar way: the browser shows a prompt and you choose. Public networks add a separate risk, covered in the guide on public Wi-Fi and betting accounts.
How to review location access
- Android: open the app's permissions
Go to Settings, then Apps, select the app and tap Permissions. Choose Allow or Don't allow for location.
- Android: choose the narrow option
Google lists "All the time", "Allow only while using the app", "Ask every time" and "Don't allow" for location. The second and third limit access to when you are using the app.
- Android: see which apps hold location
Go to Settings, then Security and privacy, then Privacy, then Permission manager. Select Location to adjust each app. Menu names can differ by phone make and version.
- iPhone: open Location Services
Go to Settings, then Privacy and Security, then Location Services, and make sure it is on. Scroll to the app and tap it.
- iPhone: pick a level
Apple lists Never, Ask Next Time Or When I Share, While Using the App, and Always. While Using the App allows access only when the app or one of its features is visible on screen.
- iPhone: precise or approximate
On that app screen you can switch Precise Location off, and the app then receives an approximate location. Whether a platform accepts that is up to the platform.
Illustrative example
Illustrative example: a phone shows 6 apps with location access. You review each and find 2 are betting or banking apps you use, 3 are apps you no longer open, and 1 is a weather app. Set the 3 unused apps to Don't allow (or Never on iPhone). That leaves 6 minus 3 = 3 apps with access, and for the 2 betting or banking apps you can choose while-using-the-app rather than all-the-time. The numbers are invented to show the step; your phone will differ.
Location, data and where it goes
A location result is personal data tied to your account. The regulations require personal and financial player data to be encrypted in transit and at rest, and stored and processed on servers in Kenya unless the Authority grants a written exemption (r.42). They do not mention location data by name. How long it is kept and who sees it belongs to the operator's privacy notice, which the guide on personal data terms for gambling accounts helps you read.
A person outside Kenya may also be blocked, which links to the registration rules in the guide on non-Kenyans and betting accounts.
What a location check does not tell you
A location check shows that a platform is applying a legal duty. It does not show that the app is genuine, or that the operator is licensed. Check the regulator's register for the 2025/26 trading period (page last modified 2026-03-19, so open the live page) and the exact licensed domain.
18+. Gambling is addictive. Play responsibly, and if gambling is causing you harm, see the responsible gambling page for the GRA toll-free line.
Questions and answers
Is a location check a legal requirement or the operator's own choice?
For a licensed online platform it is written into the regulations: r.41 lists geo-location technology among the minimum standards, and r.85(1) bars a person from taking part in online gambling without a location verification. The method is left to the operator and the Authority's approval process.
Does the law say the check must use my phone's GPS?
No. The definition in r.2 speaks of a system capable of accurately determining the physical location of a player. It names no signal such as GPS, Wi-Fi or IP address.
What if I deny location permission?
The regulations do not describe what a platform must do in that case. A platform that must verify location may be unable to let you continue, or may fall back on another method. That is general reasoning, not a rule from the text.
Can I choose approximate location instead of precise?
Apple documents this for iPhone apps. Whether a platform accepts an approximate location depends on its own method, which the regulations do not specify.
Why was I blocked while inside Kenya?
The regulations require blocking from prohibited locations but set no accuracy standard and no appeal route in the text read. Typical general causes are location switched off, a weak signal indoors, or a connection that routes through another place. Contact the operator's customer care and keep the details.
Does the platform keep my location data?
The regulations require personal and financial player data to be encrypted and stored on servers in Kenya unless the Authority grants an exemption (r.42). They do not list location data by name, so ask the operator for its privacy notice.
Sources
- Gambling Control (Conduct of Gambling Operations) Regulations, 2026, rr.2, 41, 42, 85, accessed 2026-11-09
- Gambling Control Act, 2025 (No. 14 of 2025), ss.67(1), 79(1), accessed 2026-11-09
- Gambling Control (Licensing) Regulations, 2026, Form 12 (gambling software/platform authorization), section D2, accessed 2026-11-09
- Android Help: Change app permissions on your Android phone, accessed 2026-11-09
- Android Help: How Android location works, accessed 2026-11-09
- Apple Support: Control the location information you share on iPhone, accessed 2026-11-09