Esports iconEsportsSep 26, 2026 ~5 min source read

One Data Error Turned Into 553 BetStop Breaches at Palmerbet

A mismatched name and incorrect date of birth on a legacy account meant a self-excluded customer stayed active for nearly 18 months, prompting an ACMA enforcement outcome and an 18-month court-enforceable undertaking for Palmerbet.

One Data Error Led to 553 BetStop Breaches at Palmerbet

Share this story

Send the public story page.

Useful takeaways from this story.

A single inaccurate name and wrong birthdate on a legacy account produced 553 separate breaches after failing to match a BetStop self-exclusion record.

Palmerbet had updated onboarding checks in 2023, but legacy accounts were not retroactively verified, leaving gaps in identity controls.

The case is part of a wider regulatory focus: other operators (including Dabble) have faced similar BetStop-related enforcement this year.

The useful part

A mismatch in a name field is a mismatch regardless of which odds board it shows up on. What makes this case sting is that Palmerbet isn't accused of ignoring the register. How a Shortened Name Turned Into 553 Contraventions The timeline is the whole story here.

How it works

  • The customer registered with BetStop on 2 September 2023, and Palmerbet first flagged them to the database four days later, on 6 September, but with the flawed personal information already baked in.
  • The problem was legacy accounts, older records like this customer's that never got run back through the new checks, sitting there with unverified or simply wrong identity data until a positive BetStop match...
  • ACMA concluded Palmerbet failed to take "reasonable precautions and exercise due diligence" in verifying and handling that identity data, which is a polite regulatory way of saying the fix never got applied...
  • The account only closed on 22 February 2025, the day the register finally returned a positive match.
  • They Just Didn't Reach Everyone Palmerbet isn't a bookmaker that never bothered updating its systems.

What to take from it

Get that wrong on a single legacy account and you don't get one breach, you get hundreds, and every bet placed under a false negative counts against you. The operator had actually tightened onboarding in mid-2023, adding proper date-of-birth verification for new sign-ups. Malcolm Johnson and Neil Meaney of the Australian Communications and Media Authority.

Example or evidence

  • Read More By Esports.net Staff, Esports.net Published 3:40 PM CEST, Sun September 20, 2026 Esports Betting 11 Premier League Clubs Still Linked to Unlicensed Brands Entain says 11 Premier League clubs still...
  • That's the correct remedy, but it doesn't undo the core lesson: a national self-exclusion register is only as good as the name and birthdate an operator types into it.
  • x () x | Reply Insert This website uses cookies to enhance your browsing experience.

Details worth keeping

It covers every licensed interactive wagering account in Australia, whether the customer is chasing esports outrights, racing multis or AFL lines, which means the same identity-matching plumbing that failed this Palmerbet customer sits under any esports market the operator books. ACMA counted 18 contraventions of section 61KA(3) of the Interactive Gambling Act – one for every day wagering services were provided to a self-excluded individual – plus 535 separate contraventions of section 61MB(5) for failing to close the account, counted day by day past the point it should have shut. Palmerbet Isn't Alone on This List Earlier this month, wagering operator Dabble Sports was also hit with penalties over repeated BetStop failures, and ACMA's public investigations record lists several other 2026 outcomes touching operators including Entain, Chasebet and BetPlay for various BetStop-related contraventions.

Related coverage

  • Esports: BetStop compliance failures saw Dabble fined AU$1.069 million after ACMA found accounts open and marketing sent to self-excluded users.
  • Worldcasinodirectory: Palmer Bookmaking Pty Ltd, which trades as Palmerbet, has entered into an 18-month court-enforceable undertaking after the Australian Communications and Media Authority found breaches of national online...
  • Worldcasinodirectory: Dabble has paid more than A$1 million in penalties after Australian regulators found the betting operator breached national self-exclusion requirements designed to protect people who choose to stop gambling...
  • Worldcasinodirectory: Tabcorp VIC Pty Ltd has received a A$350,000 fine after failing to fully introduce mandatory multi-factor authentication controls for customer wagering accounts in Victoria.
  • Crypto: Bitget says a $351.6M wallet breach hit hot and warm wallets, with withdrawals paused as investigators examine a backend system compromise.

More context around this story.

Loading more related stories...

Keep reading in the app

Open the app view to save this story, compare related coverage, and continue from the same source.

Open in app