Bookmaker duty of care

Why this matters

Most people who have been harmed by a bookmaker assume they have no legal recourse. They were of legal age, they pressed the buttons, they signed the terms. The industry has spent decades telling exactly that story. It is wrong as a matter of law. Sports betting in the UK is one of the most heavily regulated consumer activities, and the Gambling Commission has been clear, repeatedly and in increasingly punitive enforcement decisions, that operators owe substantive, enforceable duties to the people they take money from.

The Gambling Act 2005 — the foundation

The Gambling Act 2005 introduced three statutory licensing objectives that every UK operator must uphold:

• Preventing gambling from being a source of crime or disorder.
• Ensuring gambling is conducted in a fair and open way.
• Protecting children and other vulnerable persons from being harmed or exploited by gambling.

That third objective is the core of the duty of care. It is not aspirational language; it is a statutory licensing condition. Every operator licence is granted on the condition that the operator will actively protect vulnerable customers — which the Gambling Commission has interpreted to include any customer showing signs of disordered gambling.

The LCCP — the binding rulebook

The Licence Conditions and Codes of Practice (LCCP) translates the Gambling Act's objectives into concrete operator obligations. It is binding: a breach is not a guideline failure but a regulatory breach with potential licence consequences. The most important sections are the Social Responsibility Code Provisions (SRCPs), which carry the full weight of licence conditions and cover customer interaction, marketing, VIP schemes, self-exclusion, at-risk identification, and affordability/source-of-funds checks. Read our deeper Social Responsibility Code guide.

From regulatory duty to legal liability

A regulatory breach does not automatically equal a successful compensation claim — but it goes most of the way there. Modern UK authority treats the SRCPs as evidencing the standard of care a reasonable operator was bound to meet. Where the operator fell below that standard and harm was a foreseeable consequence, a negligence claim succeeds. Claims are usually framed as breach of contract (T&Cs incorporate social-responsibility commitments), negligence (duty + breach + foreseeable harm + causation), and statutory/equitable claims (restitution of deposits made under regulatory failure).

The four duties operators most often breach

1. The duty to detect harm

Operators sit on more behavioural data about their customers than almost any other consumer business. Deposit frequency, session length, time-of-day, stake escalation, chasing patterns, declined-card retries, support-chat distress signals — every one of those is logged. When operators ignore obvious patterns in their own data, that is the duty failure. "We didn't notice" is not a defence when their own systems were screaming at them.

2. The duty to intervene

Detection without intervention is meaningless. The SRCP requires operators to act on harm markers — through pop-ups, deposit limits, mandatory cool-offs, affordability requests, account suspensions, and ultimately closure. A pop-up at the moment a customer has already lost £50,000 is not intervention; it is theatre.

3. The duty not to exploit

VIP schemes, hospitality, free bets, cashback — these were the industry's machinery for keeping the most-harmed customers in the funnel. See our VIP scheme pillar guide.

4. The duty to honour self-exclusion

When a customer self-excludes — directly or via GAMSTOP — the operator's obligation is absolute. Re-opening accounts, allowing duplicate sign-ups, marketing to excluded customers, or accepting deposits from a known excluded user is a hard breach. See our self-exclusion pillar.

How the duty has evolved

The duty of care has tightened in three waves: 2014–2018 (first substantive enforcement actions for AML and social-responsibility failures); 2019–2021 (VIP-scheme reforms; landmark settlements; seven-figure fines; the GAMSTOP rollout); 2022–2026 (White Paper reforms, mandatory affordability frameworks, and an unmistakable judicial appetite for private claims). See landmark cases on bookmaker liability.

The US position — state by state

Each state with legalised sportsbooks has its own framework. Substantive obligations are similar across regulated states: problem-gambling self-exclusion lists, mandatory deposit/loss limits, marketing restrictions, and responsible-gaming reporting. Claims are typically framed under state consumer protection statutes plus negligence against operators including DraftKings, FanDuel, BetMGM and Caesars.

What this means for your claim

We do not need to prove the operator was malicious. We need to prove the operator owed you a duty, that the duty was breached, and that you suffered loss as a result. The Gambling Act 2005 establishes the duty. The LCCP defines the standard. Your account file evidences the breach. Your bank statements and (where applicable) medical records evidence the loss. That is the structure of every successful claim we run.

What to do today

Take our 60-second free claim check. If you are in crisis, please call Samaritans 116 123 (UK) or 988 (US).