The Amsterdam District Court dismissed a personal data lawsuit against Unibet, clarifying iGaming operators’ legal obligations under GDPR and Dutch regulations. Learn how this pivotal case impacts the future of data rights and compliance in the industry.
Background of the Unibet Personal Data Case
The case was brought forward by Gokverliesterug, an organization advocating for players who claimed Unibet mishandled their personal data. The dispute stemmed from requests for gaming and transaction records spanning between 2010 and 2024. Although Unibet provided some data in 2023 and 2024, additional data requests were denied, with the operator citing procedural and legal constraints under Maltese law.
What Were the Key Claims?
- Players accused Unibet of withholding personal data, violating GDPR regulations.
- There were allegations of improper use of player information for marketing purposes without explicit consent.
- The claimants sought the release of complete data and financial compensation for affected players.
Arguments Made by Unibet
- Unibet maintained that their data handling adhered to their published terms and conditions and applicable laws.
- The operator stated that additional data retrieval was subject to legitimate processes and business justifications.
- They reinforced their compliance with GDPR and referenced the legal jurisdiction of their parent company in Malta.
Key Court Decision and Justification
On July 8, 2025, Amsterdam’s District Court ruled in favor of Unibet, dismissing the case. Key rulings included:
- The court declared Gokverliesterug lacked legal standing under GDPR to represent players in this instance.
- The provided evidence did not show any unlawful misuse or retention of data by Unibet.
- The operator’s consent protocols and compliance processes were deemed sufficient under Dutch regulatory standards.
Implications for the iGaming Industry
The case established important precedents for data privacy and regulatory compliance:
- Regulatory Clarity: iGaming operators now have clearer guidelines on data handling within the Dutch market.
- Compliance Frameworks: The ruling underscores the importance of robust consent procedures and strict adherence to GDPR requirements for all operators.
- Future Precedents: Licensed operators in strict regulatory environments, such as the Netherlands, may use this case to strengthen their defenses during similar disputes.
Conclusion
The Dutch court’s dismissal of the Unibet personal data case reinforces the importance of well-structured compliance strategies in the iGaming sector. It proves that operators with transparent and robust data processes can successfully navigate legal challenges while maintaining customer trust and meeting regulatory demands.
