UK Gambling Websites Face Audit Findings on Cookie Consent Practices

Researchers at Swansea University’s GREAT Centre conducted an audit of 624 licensed British gambling websites, and the results highlight patterns in how these platforms handle cookie consent banners under GDPR rules. The examination took place ahead of September 2026 reporting cycles, with findings published in early September that drew attention from regulatory observers and industry analysts alike. The study revealed that 86 percent of the sites examined appeared to fall short of GDPR requirements in their cookie consent mechanisms, a figure notably higher than the 54 percent violation rate identified in a broader analysis of websites across other sectors. Data collection often began before users granted explicit consent, occurring in approximately two-thirds of the cases reviewed, while 24 percent of the platforms lacked clear options for users to disable tracking software entirely.

Key Findings From the GREAT Centre Examination

Experts involved in the project documented several recurring issues across the sampled sites, including the use of design elements that guide users toward accepting all tracking cookies by default. These practices, commonly referred to as dark patterns in privacy discussions, appeared in numerous instances and prompted closer scrutiny from data protection specialists.

Major operators received specific mentions in the audit summaries, with Ladbrokes, William Hill, and Hollywood Bets among those cited as examples where consent flows raised questions. The researchers noted that such patterns extended beyond smaller platforms, indicating the issue spanned a wide range of licensed entities operating within the British market.

Details on Consent Banner Operations

Consent banners on the audited sites frequently presented limited choices, making it more straightforward for users to accept tracking than to reject it. In many cases, the interfaces collected data immediately upon page load, bypassing the requirement for affirmative consent that GDPR establishes. Observers note that this approach contrasts with the regulation’s emphasis on user control over personal information processing.

The audit also identified instances where rejecting tracking required additional steps not clearly signposted, which contributed to the overall compliance concerns. Researchers compiled these observations into a dataset that compared gambling platforms directly against general web standards, underscoring the elevated rate of apparent violations within the sector.

Comparison With Broader Website Trends

Separate analysis of websites overall showed a 54 percent violation rate, yet the gambling sector’s 86 percent figure stands out in the data compiled by the GREAT Centre team. This difference suggests sector-specific factors may influence how platforms implement consent tools, although the study itself focused on documentation rather than causation.

Figures from the project indicate that two-thirds of gambling sites initiated data gathering prior to consent, a practice that aligns with some of the most common shortcomings flagged in GDPR enforcement actions elsewhere. Meanwhile, the 24 percent of sites without disable options for tracking software added another layer to the reported compliance gaps.

Context Around the September 2026 Reporting

The timing of the audit release coincided with ongoing discussions in regulatory circles about data privacy enforcement priorities heading into late 2026. Licensed operators in Britain operate under frameworks that incorporate GDPR alongside domestic rules, and the findings provide one data point for those monitoring banner design trends.

According to reports covering the study, the researchers examined a representative cross-section of licensed sites to produce these statistics. The results were shared through outlets that referenced the original Swansea University work, allowing industry participants to review the methodology and sample details.

Responses and Next Steps in the Sector

Following the publication of these results, some operators began reviewing their consent implementations, although the audit itself did not detail individual company statements. Regulatory bodies with oversight of both gambling and data protection have access to the same public findings, which may inform future compliance checks.

The study authors emphasized that the 624-site sample covered a substantial portion of the licensed British market, providing a broad view of current practices. This scale allowed for direct comparisons between gambling platforms and wider web trends, highlighting where differences emerge in consent handling.

Conclusion

The GREAT Centre audit supplies concrete numbers on cookie consent practices across hundreds of licensed gambling websites, with 86 percent showing apparent GDPR shortfalls, including pre-consent data collection in two-thirds of cases and missing disable options in 24 percent. Dark patterns appeared frequently, and major names such as Ladbrokes, William Hill, and Hollywood Bets featured in the examples. These figures exceed the 54 percent rate seen in general website reviews, offering a factual baseline for ongoing compliance discussions as September 2026 progresses. Further details appear in coverage of the study, while additional context is available through reports summarizing the audit outcomes.