Greater transparency in online gambling: A court in Amsterdam compels providers to disclose loss data under the GDPR.
In its judgment of July 4, 2025 (Case No. C/13/769802 / KG ZA 25-394), the Amsterdam District Court made a landmark decision. According to this ruling, European online gambling providers are obligated to provide players with comprehensive information about their losses upon request – based on the General Data Protection Regulation (GDPR).
What exactly was the issue?
A player had been playing for an extended period with the Malta-based gambling provider Risepoint Limited (formerly part of the Kindred Group and operator of Unibet) before the company held a valid license for the Dutch market. Following substantial losses, the player requested access to his transaction data under Article 15 of the GDPR in order to quantify his actual net loss and examine potential claims for reimbursement.
Provider refuses to release information – court intervenes
Despite repeated requests, Risepoint refused to fully disclose the requested data. The company cited allegedly applicable data protection regulations in Malta as justification.
However, the court in Amsterdam rejected this argument.
The transactions constituted personal data within the meaning of the GDPR, as they allow inferences to be drawn about user behavior, account activity, and betting patterns. The player therefore has an enforceable right to access this data, even if they need it to pursue civil claims (e.g., due to invalid gaming contracts).
A ruling with Europe-wide relevance – also for Germany?
This decision sends a clear signal to many affected individuals across Europe – especially players who have lost money with unlicensed providers. German courts have already recognized claims for reimbursement against such providers. However, enforcement often failed due to a practical obstacle: the lack of oversight of deposits, stakes, and losses.
The Amsterdam ruling provides clarity:
Players have a right to comprehensive information. Providers are therefore obligated to provide complete, machine-readable, and clearly presented transaction data.
Data disclosure under the GDPR as the key to recovery
According to Article 15 of the GDPR, data subjects have the right to obtain information about the personal data stored by a provider. For players, this means specifically:
- They can track in detail when and how much they deposited.
- which bets they placed and what losses they suffered.
- and which payments have been made.
This information forms the basis for a legal assessment and possible claims for reimbursement.
A Clear Message to the Providers:
A Clear Message to Suppliers: No More Loopholes!
The decision clarifies that online casinos can no longer invoke national peculiarities or formalities to circumvent data access requests. The GDPR applies across borders and therefore also protects consumers who have gambled on illegal platforms.
The law firm Cocron provides support to affected individuals nationwide.
- Enforcement of GDPR access rights
- Investigation and legal review of potential claims for reimbursement
- Out-of-court and in-court representation against gambling providers and payment service providers.
