A big brand getting fined is not the scandal you think it is
Bet365 lost its appeal against sanctions from Sweden’s gambling regulator, with courts upholding findings of serious and systematic breaches of duty of care and deposit limit rules between 2019 and 2022, according to reporting by Focus Gaming News in October 2026. The total came to SEK 40m (about €3.5m) plus a further SEK 4m, per that report. The operator kept its Swedish licences after tightening its responsible gambling controls.
The instinctive reading is that one of the world’s largest bookmakers was caught mistreating customers and therefore cannot be trusted. The more useful reading is narrower and less dramatic: a regulator with real powers looked at the actual behaviour of a licensed operator, found it wanting, documented exactly why, and made the finding stick through an appeal. That is the system working. For an Indian bettor, the uncomfortable part is not the fine. It is that nobody is doing the same inspection on the version of the site you log into.
So this piece uses the Sweden case as a worked example of what betting site customer protection means in practice, then turns it into something you can actually check before you deposit.
What a customer protection breach actually covers
A customer protection breach is a failure to operate the safeguards a licence requires, not a failure to pay out or a run of bad luck. Regulators are looking at process: whether the operator verified who its customers were, whether it enforced the limits and exclusions it promised, whether it noticed players who were losing more than they could absorb, and whether its terms and payouts were handled fairly.
In Sweden’s case, per the Focus Gaming News report, the central finding concerned deposit limits. Swedish rules require players to set a deposit cap; Bet365 offered a “no limit” option, which regulators said did not meet the legal requirement to set a specific amount. Alongside that sat the duty of care findings covering the 2019 to 2022 period. Notably, the remedies cited in the report were operational rather than cosmetic: manual review of high-loss customers and closer monitoring of higher-risk players.
KYC, age and identity verification failures
KYC checks exist so an operator knows who holds the account, that they are an adult, and that the money is not being laundered. The failure mode is familiar to anyone who has bet online: registration takes forty seconds and no document is requested until the first withdrawal, at which point the account is frozen pending verification. Front-loaded KYC is friction. Back-loaded KYC is a withdrawal problem waiting to happen, and regulators treat it as both an anti-money-laundering and a player-protection issue.
Self-exclusion and affordability check gaps
Self-exclusion tools only count if they are enforced. A breach here looks like an excluded player being able to open a second account with the same documents, or marketing emails continuing to land during a cool-off period. Affordability and duty of care sit next to this: the expectation in markets like Sweden and the UK is that an operator notices a customer whose losses have escalated sharply and intervenes, rather than treating the pattern as a commercial success.
Withdrawal and dispute-handling shortfalls
The third category is the one bettors complain about most and regulators catch least often. Unclear bonus terms, a maximum cashout buried in clause 14, withdrawals paused for “security review” with no stated timeframe, or a complaints process that loops back to the same chat agent. None of this is exotic. It is ordinary friction that becomes a licence problem when it is systematic.
Why a fine in Stockholm does not travel
Large, listed, long-established operators get fined, and the Swedish regulator Spelinspektionen is one of several that does it routinely alongside the UK Gambling Commission and the Malta Gaming Authority. Compliance failures are a scale problem, not a fly-by-night problem. Big operators run millions of accounts across dozens of markets, and the gap between a policy written in head office and the setting a customer actually sees in the app is where breaches live.
The nuance that matters more for Indian readers: licences are jurisdictional, and so is enforcement. A sanction against the Swedish-licensed entity does not automatically change the standing of the same brand’s UK, Maltese or other licences, and it does not mean the operator was doing the same thing elsewhere. Rules differ too. Sweden’s mandatory deposit cap, the exact requirement Bet365 fell foul of, does not exist in most licensing regimes at all. A site can be fully compliant in one market and offer a product in another market where nobody has ever required that control.
That cuts both ways. The brands with the longest public enforcement records are, as a rule, the brands operating in markets where someone is actually checking. Silence is not a clean record.
The India gap: plenty of betting, no single watchdog
India has no unified national regulator licensing and supervising online betting operators the way Sweden, Malta or the UK do. Gambling law here is largely a state matter, written for physical premises long before anyone had a betting app, with separate treatment for games of skill and a patchwork of state-level restrictions. The practical result is that there is no Indian equivalent of Spelinspektionen to audit deposit limits, review duty-of-care logs, or hear your complaint.
Why Indian bettors end up offshore by default
Because that is where the product is. The sites that accept rupee deposits, support UPI, price IPL markets and run Teen Patti tables are overwhelmingly licensed somewhere else, most often Curaçao, Malta, the Isle of Man or Gibraltar. Choosing an operator in India is therefore really choosing a licensing jurisdiction, usually without realising it.
Not all licences buy the same protection
Here is the trade-off with no clean answer. The strictest regimes impose mandatory deposit caps, affordability monitoring, national self-exclusion registers and binding dispute resolution, and they publish enforcement decisions when operators fall short. Those same regimes mostly do not licence operators to serve Indian customers. The licences that do cover this market tend to be lighter touch: fewer mandated player-protection controls, thinner public enforcement records, and complaints processes that are harder to escalate.
So you can have the protections or you can have the product, and most people quietly take the product. If that is your choice, make it knowingly. The weaker the licence, the more of the vetting work falls on you.
Eight things to check before you fund an account
None of this guarantees you will be treated well. It filters out the operators most likely to treat you badly, which is a different and more honest claim.
- Find the licence number in the site footer and verify it on the regulator’s own public register, not on the operator’s page. Confirm the registered company name on the licence matches the entity named in the terms you are agreeing to.
- Check how long that licence has been held and whether the regulator has published sanctions, warnings or conditions against it. Most serious regulators list enforcement decisions publicly.
- Look for independent fairness testing of games and RNG by a recognised lab such as eCOGRA or iTech Labs, and check the certificate is current rather than a logo pasted in the footer.
- Open the responsible gambling page before depositing. Deposit limits, loss limits, session reminders, cool-off and self-exclusion should all be present, self-serve, and applied without needing to email support.
- Read the withdrawal terms specifically: minimum and maximum amounts, stated processing times, verification requirements, and any fee or dormancy clause. Then read the bonus terms for wagering multiples, game weighting, max bet while a bonus is active, and max cashout.
- Search for recent user complaints by name, focusing on withdrawal and verification threads rather than star ratings. Pattern matters more than volume; the same specific problem repeated is the signal.
- Confirm there is a named dispute resolution path in the terms, ideally an alternative dispute resolution body or the regulator itself, with contact details you can check independently.
- Check the basics of money and data handling: HTTPS throughout, payments through recognised processors rather than personal or third-party bank accounts, and a data protection policy that says what is stored and for how long.
Red flags that are worth walking away over
- No licence number anywhere, or a number that returns nothing on the regulator’s register.
- Licence held by a company name that appears nowhere in the terms and conditions.
- No deposit limit or self-exclusion tools, or tools that exist only on request.
- Identity documents demanded for the first time only when you try to withdraw.
- Terms the operator reserves the right to change retroactively, or a clause allowing winnings to be voided at sole discretion.
- Deposits accepted only through personal UPI handles or individual bank accounts.
- Support that refuses to answer in writing, or has no email address at all.
- Marketing that frames betting as income, pushes “guaranteed” tips, or chases you after you ask it to stop.
If you believe an operator has treated you unfairly
Document first, complain second, escalate third. Screenshot the bet, the balance, the relevant terms as they appeared, the transaction record and every support exchange, with timestamps. Terms change; your screenshots do not.
Then raise a formal written complaint with the operator, referencing the specific clause you say was breached and asking for a final response. Keep it in email or ticket form so there is a trail. If the response is unsatisfactory or does not arrive, escalate to the alternative dispute resolution body or regulator named in the terms, attaching your documentation. Where a card or wallet payment is involved and a service was clearly not delivered as described, a chargeback through your payment provider is sometimes available, though it may close the account permanently. With a lightly regulated licence, be realistic: escalation may go nowhere, which is exactly why the vetting work happens before the deposit rather than after.
And keep the limits on yourself, not just on the operator. Set deposit caps, use session reminders, and treat betting as paid entertainment with a negative expected return, because that is what the house edge makes it. Services like India’s national mental health helpline exist for anyone whose gambling has stopped feeling optional. Betting is for adults only.
The Sweden case ends tidily: a finding, a fine, a fix, an appeal lost, a licence retained. Nothing about betting from India ends that tidily, because the regulator whose register you are checking has no duty to you and no jurisdiction over your complaint. What a checklist buys you is not protection. It is a better-informed bet on which operator is least likely to need protecting against.