Palmerbet breaches online gambling self-exclusion rules, ACMA hits it with 18-month court-enforceable undertaking

Dig Deeper

Related stories

2026/08/21: Australia’s self-exclusion scheme BetStop sign-ups hit 67,000 2025/06/09: Australian regulator warns betting companies over self-exclusion breaches 2026/09/16: Australian bookie Dabble fined more than AU$1 million over BetStop breaches 2026/07/06: Bet365 undergoing Enforceable Undertaking by AUSTRAC for AML/CTF shortcomings

The Backstory

BetStop turns compliance into an industry test

Palmerbet’s 18-month court-enforceable undertaking places another Australian bookmaker inside a widening regulatory campaign over BetStop, the national self-exclusion register that was designed to make one customer decision binding across the licensed online wagering market.

The Australian Communications and Media Authority’s case against Palmerbet centers on a basic obligation: once a person registers with BetStop, wagering providers must stop providing online betting services, close the person’s account as soon as practicable and cease direct marketing. The regulator said Palmerbet failed to close an account for a customer who had registered in September 2023, then accepted 312 bets from that person between December 2024 and February 2025.

The breach is significant because BetStop was built to remove friction from self-exclusion. Before the national register, customers trying to stop gambling often had to contact operators individually. BetStop created a single point of exclusion across licensed online wagering services, with operators responsible for matching customers to the register and blocking access. The government’s public information page says users can choose self-exclusion periods ranging from three months to a lifetime through BetStop, the National Self-Exclusion Register.

A fast-growing register raises the stakes

The Palmerbet action follows rapid takeup of the scheme. More than 67,000 people have registered with BetStop since its August 2023 launch, and 41,290 exclusions remained active at the end of July, according to figures cited in a recent report on BetStop sign-ups reaching 67,000. More than six in 10 people who had used the scheme were still excluded from licensed gambling operators.

The profile of users also sharpened the policy focus. People under 40 accounted for 78% of registrations, while 38% of users chose lifetime exclusion. Those numbers show the register is not a marginal consumer-protection tool but a core part of Australia’s online wagering framework. They also create operational pressure for bookmakers, which must continually screen customers, identify duplicate or linked accounts and make sure marketing databases are aligned with exclusion records.

An independent review published in 2026 found BetStop was helping people affected by online gambling harm, but it also identified shortcomings in awareness, usability and access to support services. The ACMA has since set up a BetStop Taskforce to oversee the review’s recommendations and consider further changes. That review context matters for enforcement: regulators are trying to strengthen the system while proving that licensed operators cannot treat the register as a passive database.

Regulator moves from warnings to undertakings

ACMA’s action against Palmerbet fits a pattern that has moved beyond reminders and into enforceable remediation. The regulator previously warned Buddybet, Ultrabet, Topbet and VicBet after finding failures tied to self-excluded customers. That investigation found the operators had sent marketing material to people on the register, and that Buddybet had failed to close accounts for customers who had joined BetStop.

In that earlier case, the regulator accepted a court-enforceable undertaking from Ultrabet, issued formal warnings to VicBet and Topbet and noted that Buddybet had left the Australian sports betting market. The ACMA also fined PointsBet AU$500,000 for failing to exclude people already registered with BetStop. The message in the regulator’s warning to betting companies over self-exclusion breaches was that operators need systems capable of respecting a customer’s decision to stop gambling.

Those enforcement tools matter. A formal warning can flag misconduct, but a court-enforceable undertaking creates ongoing obligations and gives the regulator a path to the Federal Court if the company fails to comply. Palmerbet’s undertaking requires an independent review of its compliance systems and investment to implement recommended improvements. The company also repaid deposits made by the individual after registration on BetStop through February 2025.

Large penalties show the risk of weak controls

The financial consequences have already become substantial for some operators. Dabble paid more than AU$1 million in penalties after ACMA found it failed to close 157 accounts belonging to BetStop users and sent 165 self-excluded customers 839 marketing messages through SMS, email and app notifications. The regulator also found Dabble sent more than 2,000 push notifications to 45 customers without required BetStop information.

The Dabble case expanded the compliance problem from account closure to the broader customer-engagement machinery of online betting. Modern wagering platforms rely on automated promotions, app alerts and segmented marketing lists. If exclusion data is not correctly integrated across those systems, a customer who has asked to be blocked can still receive gambling prompts or retain access through an overlooked account. The AU$1.07 million Dabble penalty showed that failures in automation are still operator failures.

That is the same vulnerability raised in the Palmerbet matter. ACMA did not describe the issue as a one-off clerical problem. By requiring an independent review, the regulator is pressing the company to examine whether its account-matching, closure and monitoring systems are fit for a national register that updates continuously and must be applied quickly.

Multiple-account failures expose a deeper challenge

Another recent case involving Entain, the operator of Ladbrokes and Neds in Australia, showed how complex account identification can undermine the scheme. ACMA found more than 500 violations of self-exclusion rules, including allowing BetStop-registered people to continue gambling, failing to close accounts and in some cases opening new accounts for excluded individuals.

The regulator said Entain’s systems did not adequately identify and link all wagering accounts held by the same customers across its services. One account remained open for more than a year after the customer had self-excluded. Rather than impose a fine, ACMA accepted an 18-month court-enforceable undertaking requiring an independent review and implementation of recommended changes. The Entain BetStop investigation underscored that compliance depends on identity resolution as much as account closure.

That issue is especially relevant in an online wagering market where operators may run multiple brands, inherit customer data through acquisitions or use separate systems for payments, promotions and account management. A national register works only if those systems converge around a single compliance outcome: no betting, no account access and no marketing for excluded people.

Broader scrutiny of bookmakers is intensifying

The Palmerbet case also lands amid wider Australian scrutiny of bookmaker compliance. While BetStop enforcement is led by ACMA, other regulators have been pressing gambling companies on financial-crime controls. AUSTRAC, Australia’s financial intelligence agency, recently required Bet365 to enter a legally binding undertaking after identifying anti-money laundering and counterterrorism financing shortcomings. That action followed earlier scrutiny of Bet365 and Sportsbet, two large corporate bookmakers.

The Bet365 enforceable undertaking with AUSTRAC was not about self-exclusion, but it points to the same regulatory expectation: online wagering companies must maintain systems that match the speed and scale of digital betting. Regulators are increasingly treating control failures as enterprise risk, not isolated breaches.

For Palmerbet, the immediate stakes are compliance with the undertaking and avoiding Federal Court enforcement if it falls short. For the sector, the broader lesson is that BetStop has shifted harm-minimization duties from policy statements to testable operating requirements. As more Australians use the register and regulators refine it, bookmakers face less room to argue that failures are transitional. The central question is now whether their platforms can consistently identify excluded customers before bets, promotions or account activity occur.