The European Gaming and Betting Association (EGBA) has published a Data Protection Code of Conduct for Online Gaming Operators. This can lead to confusion about which requirements take precedence.
As a heavily regulated sector, online gambling businesses also have to comply with laws in other areas, including in relation to anti-money laundering (AML) and fraud prevention. Those based in the EU or offering services to individuals in the EU will be caught by the GDPR and, potentially, national data protection laws.
Online gambling businesses inevitably process personal data about their customers.