While watching the World Cup, a customer opens a betting account for the group stage, places a few bets, and texts STOP to the third promotional message. By the time of the final, offers are arriving again, this time for casino games they never played.
Nothing in that sequence requires bad faith. It requires only promotional volume rising faster than the systems that manage customer consent, which is exactly what a major sporting event produces.
Consent and preference management is the discipline of capturing what each customer has agreed to receive, for which products and through which channels, and then enforcing those choices across every customer touchpoint.
Tournaments are where consent processes get stress tested, because weaknesses that stay hidden at normal volume tend to surface under peak load.
Peak Events Multiply Every Consent Management Weakness
A World Cup compresses months of marketing activity into weeks.
Operators rapidly acquire large cohorts of new customers at speed, campaign frequency rises across email, SMS, and in-app channels, and the commercial temptation to cross-sell sports bettors into casino products peaks at exactly the moment compliance teams are stretched their thinnest.
Each new signup is a consent capture event, and each campaign is a test of whether earlier choices are being honored. When customer data sits in separate systems for the sportsbook, the casino app, and the email and SMS providers, an opt-out recorded in one silo keeps no promise in the others.
Per-Product, Per-Channel Consent Is Now the UK Baseline
Since May 1, 2025, the UK Gambling Commission’s Social Responsibility Code has required operators to hold opt-in consent for direct marketing on a per-product and per-channel basis, and customers logging in after the commencement date had to confirm their marketing preferences before they could gamble.
The practical effect is that cross-selling without specific consent has ended in the UK gambling market.
A customer who agreed to betting offers by email has agreed to nothing else until they specifically consent to it, and from January 19, 2026, a further rule bans promotional incentives that mix product types such as betting and casino within a single offer.
Meeting that standard with a patchwork of channel tools is hard, because the consent record must be structured around products and channels rather than around a single marketing flag.
Your Consent Records Are the Whole Defense
In April 2026, the UK Court of Appeal ruled in a closely watched claim brought by a recovering problem gambler against a major online betting brand.
The court confirmed that consent under the UK General Data Protection Regulation (UK GDPR) and the Privacy and Electronic Communications Regulations (PECR) is assessed objectively, by reference to what information was provided, how choices were presented, and what the customer actually did.
Operators welcomed the judgment, since it means consent does not depend on a customer’s unknowable state of mind. However, the court arguably raised the evidentiary bar . The entire question now turns on evidence of a consumer’s interaction with a consent flow.
- An operator that can show the exact consent screen, wording, timestamp and subsequent changes for a named customer can rely on the objective test with confidence
- An operator whose consent history is scattered across an email platform, an SMS gateway and a CRM may need to reconstruct a consumer’s journey, possibly under the pressure of litigation
Ignored Opt-Outs Carry a Price Per Message
The 2026 tournament was also the first World Cup played largely in the United States since online sports betting spread across the country. In the United States, consent failures can carry statutory damages on a per-message basis.
Under the Telephone Consumer Protection Act (TCPA), marketing texts sent without valid consent carry statutory damages of $500 per message, rising to $1,500 for willful violations, and plaintiffs’ firms actively recruit claimants after high-volume campaign periods.
A suppression list that propagates by scheduled export, or by someone remembering to upload it, turns each day of delay into a multiplying liability.
Affiliates and Sister Brands Widen the Exposure
Tournament marketing rarely comes from one sender: Large operators run several brands over shared group infrastructure, and affiliate networks mail and message on the operator’s behalf at exactly the moments demand peaks.
A customer’s opt-out from one brand frequently never reaches others in the group, and an affiliate working from a stale list might extend the operator’s consent obligations without extending its controls.
Regulators treat marketing sent on an operator’s behalf as the operator’s responsibility, so the consent record has to be authoritative across every brand and every partner that touches the customer.
What to Fix Before the Next High-Demand Event
A major event’s fixture list is known years in advance, so there’s normally plenty of time to prepare.
Preparation should include:
- Consolidate consent and preference data into a single record per customer that spans every product and channel
- Structure opt-ins to the per-product, per-channel standard
- Connect that record to campaign tools so opt-outs happen in real time, rather than on export schedules
A customer-facing preference center completes the picture, since a customer who can opt down to one email a week during a tournament is a customer you can retain, while a customer whose only option is “STOP” is usually gone for good.
The market is consolidating this capability into unified consent and preference management platforms, though the regulatory obligation sits with the operator whatever tooling it runs.
The useful step this month is an audit: Pick one customer who opted out during the tournament, and trace how long every channel took to comply.