jili tutorial

BetStop failures put Palmerbet’s self exclusion controls under scrutiny

By jili tutorial · September 26, 2026

Palmerbet Enters Court-Enforceable Undertaking

On Wednesday, Palmer Bookmaking Pty Ltd, which trades as Palmerbet, entered into an 18-month court-enforceable undertaking with the Australian Communications and Media Authority (ACMA). The undertaking follows an investigation that found hundreds of breaches of Australia’s national self-exclusion rules. The investigation centred on a single customer who had registered with BetStop, the National Self-Exclusion Register (NSER).

Once a person registers on the NSER, Australian wagering providers are legally required to close any existing accounts “as soon as practicable.” That means account closure should be a priority, not something left to chance or manual error. In Palmerbet’s case, the process failed dramatically.

What Is BetStop and Why Does It Matter?

BetStop is Australia’s national self-exclusion register. It allows people who recognise that they may have a gambling problem to exclude themselves from all licensed online wagering services in Australia. It is designed to provide a single point of registration so that a person does not need to contact each betting operator separately.

When a customer registers with BetStop, their details are made available to wagering operators. Those operators must then:

The entire system depends on accurate data. If an operator submits incorrect customer details when checking the register, the register may not generate a positive match — which means a person who should be protected can continue losing money with the operator none the wiser.

What Went Wrong in the Palmerbet Case?

The ACMA investigation focused on a customer who registered with BetStop on 2 September 2023. Under the Interactive Gambling Act 2001 (IGA), Palmerbet was legally obligated to close that customer’s account as soon as practicable. Instead, the account remained open for a remarkably long period.

Palmerbet accepted bets from the self-excluded customer on 18 separate occasions between December 2024 and February 2025. The account was not closed until 22 February 2025 — almost 18 months after the customer first registered on the NSER.

In other words, the self-exclusion decision was not respected, and the customer was allowed to keep gambling despite having taken the formal step to prevent that from happening.

Why Did the System Fail to Catch the Customer?

The root cause of the failure lay in poor data handling and verification processes. The NSER works by matching personal details submitted by wagering operators against the register’s records. For the match to work, operators must provide precise personal information, including:

Palmerbet repeatedly submitted NSER checks using incorrect details for the customer. Those inaccuracies included a shortened version of the customer’s first name and an incorrect date of birth. Because of those errors, the register returned negative matches, meaning the system could not connect the customer to the registered persona.

Records show that Palmerbet first flagged the customer to the database on 6 September 2023 — just days after the customer registered with BetStop — but the check used flawed information. The account was only flagged as a positive match on 22 February 2025, and only then was it closed.

Legacy Accounts Were Overlooked

The ACMA also found that Palmerbet had failed to take reasonable precautions and exercise due diligence in verifying and handling the customer’s identity data. Before BetStop launched, ACMA and the register operator issued technical specifications requiring exact name and date of birth data sourced from Australian government documents to confirm identity.

Further guidance was issued in March 2024, reinforcing those requirements. Palmerbet did update its customer onboarding procedures in mid-2023 to verify date of birth and other details, but it failed to apply those same verification steps consistently to legacy accounts — that is, accounts that already existed before the new procedures were introduced. The customer in this case fell into precisely that gap.

According to the ACMA, had accurate customer data been provided in September 2023, the account could have been closed within 24 hours.

What Breaches Did the ACMA Identify?

The investigation found two main categories of contraventions under the Interactive Gambling Act 2001.

18 Contraventions for Providing Services to a Self-Excluded Person

Under section 61KA(3) of the IGA, licensed interactive wagering providers must not provide services to a person known to be self-excluded. Palmerbet accepted bets on 18 separate days, and each day of service was treated as a separate contravention.

535 Contraventions for Failing to Close the Account

Under section 61MB(5) of the IGA, operators must close the account of a registered self-excluded person as soon as practicable. Palmerbet failed to do this on a daily basis from the point at which the account should have been closed. The regulator counted 535 contraventions — one for each day beyond the practicable closure date.

Taken together, these hundreds of breaches paint a picture of a system that was not fit for purpose at the time.

What Penalties and Remedies Did the ACMA Apply?

Rather than immediately seeking court orders or civil penalties, the ACMA accepted Palmerbet’s commitment to an 18-month court-enforceable undertaking. This is a formal legal arrangement, and breaching it can lead to court action.

As part of the undertaking, Palmerbet must:

The refund requirement is significant, because it means Palmerbet will have to return the money it accepted from a person who should have been blocked from betting in the first place.

Palmerbet is not the only operator to face scrutiny. Earlier this month, wagering operator Dabble Sports was also hit with penalties following repeated failures to comply with BetStop. This suggests the ACMA is increasingly willing to enforce the rules against both large and smaller operators.

ACMA’s Message: “Robust Systems Are a Must”

Carolyn Lidgerwood, ACMA member, stressed the importance of self-exclusion decisions and the obligations of wagering providers. She said providers “must respect that decision” and “must have robust systems in place” to ensure that self-exclusion is effective.

That message applies to all aspects of the customer journey: not just the initial registration and identity check, but also ongoing monitoring and account management. Self-exclusion should not be treated as a formality; it is a serious safeguard for vulnerable consumers.

Broader Enforcement: Website Blocks Continue

In a separate but related enforcement action, the ACMA also requested internet service providers (ISPs) block access to more illegal gambling websites. The latest blocking orders cover:

These blocks are part of a multi-year campaign against offshore and unlicensed gambling operators. According to the ACMA, since November 2019 it has asked ISPs to block a total of 1,822 illegal gambling and affiliate websites. Twelve of those websites were requested to be blocked in June of this year.

The regulator also noted that more than 230 operators have exited the Australian market since 2017, when stricter enforcement measures were introduced. This shows that the ACMA’s strategy is not limited to punishing individual breaches; it is also about disrupting the wider ecosystem that enables illegal gambling.

What Lessons Can Wagering Operators Learn?

The Palmerbet case offers several important lessons for anyone running a licensed wagering business in Australia.

1. Accurate Identity Data Is Non-Negotiable

The NSER only works when the information submitted matches the register. Using nicknames, shortened names, old addresses, or incorrect dates of birth can create false negative matches and defeat the entire purpose of self-exclusion. Operators must verify identity against official government-issued documentation and use that verified data consistently.

2. Legacy Customer Account Checks Are Essential

It is not enough to verify new customers at onboarding. Existing customers must also be matched against the register using accurate details. Updating policies for new accounts while ignoring old ones leaves a dangerous gap.

3. Automated Checks Must Be Backed by Human Oversight

Technology can fail. The fact that Palmerbet received a negative match on several occasions and took no further action suggests a lack of human oversight. If an NSER check returns a negative match, operators should review the data and investigate before accepting the result.

4. Account Closure Must Be Immediate

Under the law, account closure must happen “as soon as practicable.” For most online operators, that should mean within hours, not days or weeks. Operators should have controls in place to ensure a BetStop registration triggers an immediate freeze and closure process.

5. Compliance Is a Continuous Process

The Palmerbet case shows that one-off changes to onboarding procedures are not enough. Regular audits, staff training, and updates to compliance systems are essential to keep up with regulatory expectations.

What Does This Mean for Consumers?

For consumers, the Palmerbet case is a reminder that self-exclusion works only if operators cooperate. If you have registered with BetStop and a betting company continues to accept your money, that is a serious compliance failure — not your fault.

If you believe an operator has failed to honour a self-exclusion request, you should:

The ACMA has made it clear that respect for self-exclusion decisions is not optional. The laws are in place to protect people from the harm of online gambling, and operators that fail to comply can expect investigation, enforcement, and potentially court action.

Conclusion

The Palmerbet case is a significant reminder of what happens when self-exclusion systems fail at the most basic level. What makes it particularly concerning is that the customer’s identity data was wrong in the system, meaning Palmerbet never even identified the match until far too late.

By entering an 18-month court-enforceable undertaking, Palmerbet avoided court proceedings but is now legally bound to fix its systems and refund the money. The ACMA’s continued enforcement against both Palmerbet and Dabble Sports shows that self-exclusion compliance is one of its highest priorities.

Australian wagering operators should treat the Palmerbet case as a warning: self-exclusion is not a box-ticking exercise. It requires accurate data, robust technology, consistent processes, and a genuine commitment to protecting vulnerable customers. Those that fail will not only face regulatory action — they will also lose the trust of the very people they are meant to protect.