LeoVegas, the online gambling operator, has been penalised by the Gambling Commission for failings relating to misleading advertising and the handling of customers at the end of their self-exclusion period.
Following a review of LeoVegas’ licence the Commission has concluded matters on the basis that LeoVegas will pay a £600,000 penalty, will divest itself of any funds received as a result of the failings, and will pay the Commission’s costs.
During its investigation the Commission found that LeoVegas:
- Was responsible for 41 misleading adverts
- Failed to return funds to 11,205 customers when they chose to self-exclude and close their account
- Sent marketing material to 1,894 people who had previously self-excluded
- Allowed 413 previously self-excluded  customers to gamble without speaking to those customers first or applying a 24-hour cooling off period before allowing them to gamble.
Neil McArthur, the Gambling Commission’s Chief Executive said: “The outcome of this case should leave no one in any doubt that we will be tough with licence holders who mislead consumers or fail to meet the standards we set in our licence conditions and codes of practice. We want operators to learn the lessons from our investigations and use those lessons to raise standards. ”
Read LeoVegas Gaming Limited Public Statement for more information.
Notes to editors
- Self-exclusion is a tool used by consumers who feel they are having trouble controlling their gambling and request that the operator refuse their service.
- Our approach to enforcement.
- More information about how we regulate the gambling industry.
- Useful statistics on the gambling industry.
Journalists can contact our press office on 0121 230 6700 or email: email@example.com
Regulatory settlement during a licence review
- Marketing communications must state significant limitations and qualifications – SR code provision 5.1.7(2) and 5.1.7(2)(a)
- Responsibility for third parties – SR code provision 1.1.2
- Prevent self-excluded individuals from participating in gambling – SR code provision 3.5.3(1) and Ordinary code provision 3.5.4(5)
- Return funds to customers who have entered self-exclusion agreements – SR code provision 3.5.3(5)
Operators are expected to consider the issues here and review their own practices to identify and implement improvements
This case concerns LeoVegas Gaming Limited (LeoVegas) who hold a remote operating licence authorising it to operate an online casino and provide facilities for real event and pool betting, and bingo.
There were breaches in LeoVegas’ marketing and self-exclusion functions which meant that:
- 41 website advertisements by them or their affiliates misled consumers by failing to include significant offer limitations or by failing to present those limitations clearly enough. This is a breach of social responsibility code provisions 5.1.7(2) and 5.1.7(2)(a), and 1.1.2
- 11,205 self-excluded customers did not have their account balance funds returned to them on account closure. This is a breach of social responsibility code provision 3.5.3(5)
- 1,894 customers who had reached the end of their self-exclusion period received marketing material without first agreeing to accept it. This does not adhere to ordinary code provision 3.5.4(5)
- 413 customers who had reached the end of their self-exclusion period were able to access their accounts and gamble, despite taking no positive steps to return to gambling. This is a breach of social responsibility code provision 3.5.3(1).
In line with our Statement of principles for licensing and regulation LeoVegas will pay a penalty package of £627,000 which includes a payment of £600,000 in lieu of a financial penalty. A breakdown of the regulatory settlement is set out below.
The Commission identified that LeoVegas or its affiliates published 41 website advertisements between April 2017 and January 2018, and of these:
- 31 failed to state significant limitations and qualifications relating to promotions, despite there being space to do so (eight on its own website and 23 on affiliates’)
- 10 misled consumers, as the information needed to make an informed decision was presented in an unclear manner, contrary to CAP code 3.3.
This does not comply with the requirements in social responsibility code provision 5.1.7(2) and 5.1.7(2)(a) which states:
- Licensees must abide by any relevant provision of the CAP (UK Code of Non-broadcast Advertising and Direct & Promotional Marketing (CAP Code)) or BCAP (UK Code of Broadcast Advertising (BCAP Code)) code, as the case may be, which relates to ‘free bet’, ‘bonus’ or similar offers and in that regard follow the CAP and BCAP ‘Guidance on the rules for gambling advertisements’. In particular that:
- marketing communications (which include advertisements) must state significant limitations and qualifications. Qualifications may clarify but must not contradict the claims that they qualify.
Further, social responsibility code provision 1.1.2(1)(a) states:
- Licensees must take responsibility for third parties with whom they contract for the provision of any aspect of the licensee’s business related to the licensed activities and ensure that the terms on which they contract with such third parties:
- require the third party to conduct themselves in so far as they carry out activities on behalf of the licensee as if they were bound by the same licence conditions and subject to the same codes of practice as the licensee.
These instances came despite:
- relevant rulings by the Advertising Standards Authority in March and July 2017 concerning breaches of the CAP code
- repeated engagement by the Commission explaining the requirements of social responsibility code provision 5.1.7, the CAP codes and LeoVegas’ responsibility for affiliates
- assurances from LeoVegas’ senior members of staff that the issues were being remedied.
LeoVegas acknowledge the breaches of these requirements and has implemented changes and improvements to processes and procedures to address these breaches. These include:
- review and revision of all policies and procedures relating to marketing compliance, in order to ensure compliance
- recruitment of a marketing compliance officer in both legal and affiliate teams
- training programme for marketing personnel, including CAP rules
- compliance approval of marketing as part of the sign off process
- actively seeking CAP advice as appropriate
- limiting the number of affiliates and excluding email or SMS messaging
- improving affiliate processes around on-boarding, breaches and terminations
- overhaul of affiliate terms and conditions
- affiliate training on compliance obligations through an information programme and guidebook
- compliance audits on affiliates to identify and remedy any issues revealed.
Self-exclusion – return of funds
Whilst conducting the review into self-exclusions, LeoVegas identified 11,205 self-excluded accounts with outstanding balances.
This does not comply with the requirements in social responsibility code provision 3.5.3(5) which states:
- Licensees must close any customer accounts of an individual who has entered a self-exclusion agreement and return any funds held in the customer account. It is not sufficient merely to prevent an individual from withdrawing funds from their customer account whilst still accepting wagers from them. Where the giving of credit is permitted, the licensee may retain details of the amount owed to them by the individual, although the account must not be active.
LeoVegas acknowledge that they operated in breach and have already returned balances to players where possible. They have identified c.€16,500 (approx £14,429) in outstanding balances, with the majority being less than £1.00. LeoVegas will divest itself of those funds by making an equivalent donation to charities for socially responsible causes.
LeoVegas has now implemented procedures to process the return of account balances within 48 hours of a self-exclusion. Every quarter it will also reconcile any account balances which could not be returned, or which are under £1.00, and make a donation of the equivalent amount to charities for socially responsible causes.
Self-exclusion – return to gambling
Following receipt of a complaint from a self-excluded customer on 1 June 2016, LeoVegas performed a review of its systems. The complainant had, following receipt of marketing material, been able to access their account and gamble. The review identified a software error which had occurred on 1 April 2016 and reactivated accounts where a self-exclusion or time-out had expired, despite no positive steps to return to gambling.
As a result of this error:
- 1,894 customers who were formerly self-excluded were sent marketing material without first agreeing to accept such material
- 413 customers who were formerly self-excluded were able to gamble without contacting customer services or being given a 24-hour cooling off period. A total of €226,877 (approx. £200,000) was deposited by these players over a period of two months.
This does not comply with the requirements in social responsibility code provision 3.5.3(1) which states:
- Licensees must have and put into effect procedures for self-exclusion and take all reasonable steps to refuse service or to otherwise prevent an individual who has entered a self-exclusion agreement from participating in gambling.
Nor adhere to ordinary code provision 3.5.4(5)(e)-(g) which states:
- Licensees should take all reasonable steps to ensure that:
- at the end of the period chosen by the customer, self-exclusion remains in place, for a minimum of 7 years, unless the customer takes positive action to gamble again;
- where a customer chooses not to renew, and makes a positive request to begin gambling again, during the 7 year period following the end of their initial self-exclusion, the customer is given one day to cool off before being allowed to access gambling facilities. Contact must be made via phone or in person; re-registering online is not sufficient; and
- notwithstanding the expiry of the period of self-exclusion chosen by a customer, no marketing material should be sent to them unless and until they have asked for or agreed to accept such material.
Upon identification, LeoVegas closed the accounts and returned deposits less withdrawals to all depositing players.
LeoVegas accept the breach of the social responsibility code provision in that they did not take all reasonable steps to prevent individuals who had entered a self-exclusion agreement from participating in gambling. They also accept that they did not have an alternative approach to that set out in the ordinary code, to achieve a similar effect. This impacted vulnerable customers.
LeoVegas has improved and tested their system design so that it is more robust and meets the provisions in the ordinary code, and tightened their access controls.
We consider that this case provides valuable learning for remote operators. You should consider the following questions to avoid these issues:
- Do you understand the marketing rules outlined in your licence conditions and the CAP codes? How do you keep up to date with, and implement, CAP advice and ASA rulings? Do you train staff in them?
- Do you make use of the CAP Copy Advice service?
- Do your internal marketing sign off procedures include a compliance check?
- You are responsible for your affiliates. How do you vet and monitor them to ensure they operate compliantly? How frequent are your audits of their activity? What are the contractual consequences for them failing to comply?
- Do your self-exclusions remain effective at the end of the chosen period? Are your self-excluded customer data sets sufficiently segregated, until such time as positive action is taken? How do you meet best practice set out in the ordinary codes?
- Do you make use of all available information, including complaints, to identify potential procedural weaknesses?
- How promptly do you return funds to a self-excluded customer? What do you do with balances which cannot be returned? Are they divested?
- Can you demonstrate that you embed learning from public statements and other available sources?
The penalty package consists of:
- A total payment in lieu of a financial penalty of £600,000, which the Commission would otherwise impose for breaches of a licence condition in accordance with its Statement of principles for determining financial penalties
- Divestment of all funds held in self-excluded accounts, either directly to the player where possible or by way of payment of c.€16,500 (approx.£14,429) to charities for socially responsible causes
- Payment of £13,000 towards the Commission’s investigative costs.
Our investigation found, and LeoVegas accept, that that there were weaknesses in its systems relating to the proper management of self-exclusions, and it and its affiliates’ marketing material was non-compliant.
In determining the appropriate outcome, we took the following factors into account:
- Impact on the licensing objectives to protect vulnerable persons from being harmed or exploited by gambling, and to ensure gambling is conducted in a fair and open way
- Length of time taken to address the marketing issues, despite assurances given and extensive engagement
- Slow insight into marketing failings, particularly their responsibility for affiliates
- Missed opportunities to learn from previous public statements, particularly BGO and Lottoland
- Slow insight into the requirement to return funds on account closure
- Proactive return of €133,893 (approximately £117,000) to self-excluded players who had returned to gambling, where deposits exceeded withdrawals
- Admissions made and regulatory settlement proposed, albeit at the conclusion of a licence review.
Posted on 02 May 2018