BGC’s Plan: Ban the Winners, Call It Safety

On 17 June, Grainne Hurst, chief executive of the Betting and Gaming Council, gave evidence to the House of Lords Liaison Committee on the social and economic impact of the gambling industry. She told their lordships the BGC is making representations to the Gambling Commission to have GamProtect made mandatory. The committee received this with apparent equanimity. It is not clear they had the information needed to receive it any other way.

GamProtect is a cross-operator flag-sharing scheme. When a participating operator identifies a customer as presenting serious harm indicators, it shares that flag and basic identifying details with other members via a portal run by a private company, Tutelar Ltd. The scheme was developed with the Gambling Commission, the ICO, and DCMS. Early data show 5,527 consumers flagged, with 88 per cent matched by at least one participating operator.

On its stated terms, the scheme has a legitimate purpose. But the version Hurst is pushing the Gambling Commission to mandate is not fit for that purpose — and the gap between what she told the Lords and what the evidence shows is considerable.

Three Types of Customer. Three Different Outcomes.

GamProtect does not act uniformly across the betting population. It acts very differently across three distinct groups — a distinction Hurst's testimony did not draw.

Vulnerable consumers are those with genuine problem gambling indicators. For them, GamProtect works as intended. If one operator identifies a customer in crisis and flags them, other operators can act. The 88 per cent match rate suggests meaningful cross-operator coverage. This is the group the scheme exists to protect.

Recreational bettors — the majority — are not problem gamblers. For them, GamProtect is a friction point: open banking checks, source of funds requests, and the risk of incorrect matching. A Gambling Commission-funded survey found 66 per cent uncomfortable with operators accessing credit reference data; an EY survey commissioned by the BGC found 70 per cent unwilling to allow financial checks. At the margin, they migrate to less regulated alternatives.

High-value bettors are a third category: not vulnerable, not recreational, and frequently misclassified. Forrest and McHale establish that the top five per cent of horseracing bettors account for 84 per cent of stakes and 77 per cent of operator win. They are sophisticated, solvent, and rational. For this group, mandatory GamProtect is not a safeguard. It is a mechanism that strips them from the licensed market.

When the Scheme Gets It Wrong

Consider a scenario consistent with reported user experiences. A bettor self-excludes in 2021 during a difficult period. By 2025 his circumstances have changed; he is betting responsibly with a different operator. But the original closing operator has flagged him on GamProtect. His accounts at other participating operators are frozen. He contacts Tutelar, is referred back to the closing operator, which declines to discuss individual cases. No independent body can review the decision. His data remains on the system for a potential 47 years.

This is not a hypothetical. Casino.guru's discussion forums contain multiple accounts of exactly this pattern. The scheme has no meaningful independent appeals mechanism. The governance is controlled by the industry that built it.

The Competition Problem No One Is Naming

The BGC's mandation push has a structural consequence that deserves direct examination, because it raises questions that go beyond industry disagreement.

The licensed betting market contains two fundamentally different business models. Volume operators — Bet365, the Entain brands, 888/William Hill, Paddy Power — serve large numbers of recreational customers at modest stakes. No single customer is material to their economics. These firms have also, through algorithmic account management, largely withdrawn from pricing horseracing to high-stakes customers. The mechanism is straightforward: when a sharp bettor opens an account, liability management software restricts his stakes to a few pounds within weeks. He is, in practice, no longer their customer.

Value operators — Macbet, Fitzdares, Sporting Index, Spreadex — have built their entire model around this customer.

Mandated GamProtect produces a data-sharing externality with asymmetric commercial impact. Every operator contributes flags to Tutelar's shared pool. But the costs fall unevenly. Volume operators lose a segment they already exited. Value operators lose the segment their revenue depends on. The identical obligation produces material harm for one category and negligible harm for the other.

The firms lobbying for mandation withdrew from the high-value segment through algorithmic restriction. They now seek to foreclose it through compliance mandate. The effect — whether or not the intent — is to remove the customer base sustaining independent value operators while leaving the volume model undisturbed. Described to a competition economist, this would prompt questions.

The Data Protection Position Is Not Sustainable

The retention schedule under GamProtect's published operator terms — BetMGM, 888, Sky Bet — runs as follows: five-year exclusion period, then 35 years of residual data retention, then a seven-year archive phase. Total: 47 years.

GDPR Article 5(1)(e) requires personal data be retained no longer than necessary for its stated purpose. GamProtect's purpose is protecting a vulnerable person from cross-operator harm at a moment of acute risk. A five-year exclusion is arguable. A further 35-year residual period is not. No public case has been made for it.

The ICO Regulatory Sandbox Phase 1 confirmed that current Article 6 bases carry a customer right to object. Written into the LCCP as legal obligation, that right disappears. A 47-year restriction, on data an individual cannot contest, with no independent appeal, is not a structure the ICO's own principles support. Mandation does not resolve this. It entrenches it.

The Conclusion the Lords Didn't Hear

Two economic consequences follow, and both are measurable.

First: offshore migration. The flagged high-value bettor does not stop gambling. He moves to Curacao-licensed, crypto-native, Asian-facing operators that compete precisely on the freedom from intrusion the licensed market is mandating away. His levy contribution goes with him and does not return.

Second: market concentration. Independent value operators, stripped of their core segment, contract or exit. The licensed market consolidates around the volume giants who designed the scheme — with direct consequences for racing's levy yield and the diversity of the commercial ecosystem that sustains it.

Grainne Hurst told the Lords GamProtect is a consumer protection tool. For a narrow group of genuinely vulnerable people, it is. For the majority of the betting market, it is a friction that will accelerate offshore migration. For the high-value segment and the independent operators who serve it, it is something more specific: an instrument of market foreclosure built by the beneficiaries and rubber-stamped, so far, without scrutiny.

The Gambling Commission and the CMA both have jurisdiction over what follows. One of them should use it.