Cookies on the Gambling Commission website

The Gambling Commission website uses cookies to make the site work better for you. Some of these cookies are essential to how the site functions and others are optional. Optional cookies help us remember your settings, measure your use of the site and personalise how we communicate with you. Any data collected is anonymised and we do not set optional cookies unless you consent.

Set cookie preferences

You've accepted all cookies. You can change your cookie settings at any time.

Skip to main content
  1. Home
  2. Licensees and businesses
  3. LCCP Information requirements

Guidance

LCCP Information requirements

Guidance for licence holders on the information requirements in the LCCP

Published
30 October 2020

Last updated
23 October 2024 - Changes

Document actions
Print or save (opens in new tab)

  1. Contents
  2. 8 - Key events (gambling facilities)

8 - Key events (gambling facilities)

This section provides guidance to holders of gambling operating licensees on how to tell us about key events which relate to the gambling facilities they provide.

It includes how to tell us:

  • if any security breach to your company’s environment, has an adverse effect on the confidentiality of customer data; or prevents your customers, staff, or legitimate users from accessing accounts for longer than 12 hours
  • if a fault in a gaming system results in underpayments or overpayments to a player (including if a fault causes an incorrect prize or amount to be displayed)
  • if a company starts or stops providing gambling facilities on website domains (including mobile sites or apps) or broadcast media.

Key Event 16: Information security breaches

Licence condition 15.2.1 (16)

Reporting key events - Gambling facilities

All operating licences

Any security breach to the licensee’s environment that adversely affects the confidentiality of customer data; or prevents the licensee’s customers, staff, or legitimate users from accessing accounts for longer than 12 hours.

Your company must submit a key event report to us if any security breach to its environment, has an adverse effect on the confidentiality of customer data; or prevents your customers, staff, or legitimate users from accessing accounts for longer than 12 hours.

You must do this within five working days of you finding out about the event.

For further information on what should be reported, see our guidance on Notification of information security breaches.

All key events are to be reported to us via the key event part of the eServices digital service (opens in new tab) on our website. You must select the following type when entering this key event on eServices:

  • Key Event: Customer data security breach

This reporting requirement applies to holders of all operating licences.

Key Event 17: Gaming system faults resulting in under or over payments to customers

Licence condition 15.2.1 (17)

Reporting key events - Gambling facilities

All operating licences

Where a gaming system fault has resulted in under or overpayments to a player (this includes instances where a fault caused an incorrect prize/win values to be displayed).

Your company must submit a key event report to us if a fault in a gaming system results in underpayments or overpayments to a player (including if a fault causes an incorrect prize or amount to be displayed).

You must do this within five working days of you finding out about the event.

A gaming machine fault is typically where software has malfunctioned and has resulted in the stated return to player (RTP) percentage being incorrectly delivered as prizes (either under or over payment).

Other faults include odds and bonuses being displayed or calculated incorrectly.

For further information on what should be reported, see our guidance on Remote game software/payment faults.

You do not need to report gaming system faults which did not result in under or overpayments to players.

All key events are to be reported to us via the key event part of the eServices digital service (opens in new tab) on our website. You must select the following type when entering this key event on eServices:

  • Key Event: Gaming system fault

This reporting requirement applies to holders of all operating licences.

Key Event 18: Stopping or starting trading on website domains, mobile applications and broadcast media

Licence condition 15.2.1 (18)

Reporting key events - Gambling facilities

All remote licences

In the case of remote gambling, the commencement or cessation of trading on website domains (including mobile sites or mobile device applications) or broadcast media through which the licensee provides gambling facilities (including domains covered by ‘white label’ arrangements).

Your company must submit a key event report to us if, in the case of remote gambling, it starts or stops providing gambling facilities on website domains (including mobile sites or apps) or broadcast media.

This requirement includes reporting of domains covered by ‘white label’ arrangements.

You must do this within five working days of you finding out about the event.

When reporting this key event, you should include the following information:

Starting of trading on website domains or broadcast media

  • the website domain or broadcast media name(s)
  • the date the domain or broadcast media started.

Stopping of trading on website domains or broadcast media

  • the website domain or broadcast media name(s)
  • the date the domain or broadcast media stopped
  • the current outstanding balances on the website
  • how and when your company plans to inform its customers
  • how customers can contact your company to withdraw funds or to raise queries
  • the date the licensee stopped marketing activity for the website domain.

All key events are to be reported to us via the key event part of the eServices digital service (opens in new tab) on our website. You must select the following type when entering this key event on eServices:

  • Key Event: Trading/website domain changes

You must also update the details of any domain names we have recorded against your company’s licence on the ‘Domain names’ part of eServices. This is important, as domain names appear on the record of your operating licence on our Public Register.

This reporting requirement applies only to holders of remote licences.

Previous section
Key events (legal or regulatory proceedings or reports) Next section
LCCP notifications (general)
Is this page useful?
Back to top