Betika Ordered to Pay Player for Excessive Data Requests
Kenya’s Office of the Data Protection Commissioner has ordered Betika to pay $1,934 compensation to a player after the betting company demanded three months of M-Pesa transaction statements as a condition for account closure.
Player Challenges Account Deletion Requirements
Bosco Otieno maintained a betting account with Betika for six years without issues before deciding to quit in June 2025. The company refused account closure unless Otieno provided his national ID and three months of M-Pesa transaction statements. Otieno filed a complaint with the Office of the Data Protection Commissioner, arguing the requests exceeded necessary requirements and violated Kenya’s Data Protection Act of 2019.
“The company’s request risked misuse of my financial information and went beyond what was necessary for account closure,” Otieno asserted. Betika defended its position, citing the Proceeds of Crime and Anti-Money Laundering Act of 2009, which requires identity verification and transaction source documentation to prevent fraud and money laundering. The company referenced its privacy policy, stating users may need to provide additional documents during account closure.
Commissioner Rules Transaction History Request Disproportionate
Data Commissioner Immaculate Kassait determined that requesting Otieno’s national ID complied with anti-money laundering laws and data protection regulations, but demanding three months of M-Pesa statements was excessive. “In the present circumstances, while requiring the production of a national ID may be considered necessary and consistent with both POCAMLA and the Data Protection Act for purposes of verifying identity at account closure, the blanket demand for three months’ M-Pesa statements was disproportionate, unnecessary, and inconsistent with the principle of data minimisation,” Kassait wrote.
The commissioner noted the statements contain extensive personal details unrelated to account closure, and with no signs of wrongdoing in Otieno’s betting history, Betika lacked valid justification for the information request. Betika has 30 days to appeal the decision with Kenya’s High Court. The ruling follows a March 2025 fine imposed on SportPesa for a major data breach.
Recommended