Seven per cent. That is the share of active accounts UK gambling operators ran a financial vulnerability check on in the first three months after the rule arrived, according to the Gambling Commission’s own review, and 78 per cent of those checks cleared in under ten minutes. Most customers never noticed. Which is roughly the point: a British betting app does a surprising amount of checking on you, and it is built so you only find out when something trips.
With the World Darts Championship running from 11 December to 3 January and a record 180,000 tickets going through the Ally Pally ballot, a lot of people will open a betting app for the first time this winter, get asked for a selfie holding a driving licence, and wonder what just happened.
The identity check happens before the first bet, not after
Until 2019 an online bookmaker in Great Britain could take your deposit and give itself 72 hours to prove who you were. That window is gone. Since 7 May 2019 an operator has to verify your name, address and date of birth before you can gamble at all, and your age before you can touch the free-to-play games. In practice the app runs your details against credit reference and electoral roll data in the background and only asks for documents when that automated match fails. If you have moved recently, or the name on your bank account does not quite match your ID, expect the document request.
This matters more for darts than for most sports because of the calendar. The Worlds start on a Friday evening in December and the first-round upsets happen inside the opening weekend, so an app that cannot verify you until Monday has missed the moment. Verification speed is not something reviewers publish yet, but app performance under live pressure is: Lakeside World Darts tests darts betting apps in the UK with funded accounts during PDC matches, timing load speed and in-play market refresh rather than quoting the press release. That is the figure worth reading before the welcome offer.
Where you are gets checked as often as who you are
A Gambling Commission licence covers Great Britain, so a UK app has to know you are actually in Great Britain when you bet. It does this the way most location-aware apps do: GPS from the handset where you have allowed it, the IP address of your connection, Wi-Fi network fingerprinting and, on mobile data, the cell towers your phone can see. Each on its own is easy to fool. Together they are hard to fool quietly, and a VPN that lands you in Frankfurt will usually just grey out the betting tab until you switch it off.
Many UK operators also hold licences elsewhere, so travelling does not always mean a locked account. It may mean a different product with different markets and odds. If you are following the darts from a hotel over Christmas, check what your operator does in that country before you land.
The affordability check you probably did not know about
The newest layer is the one most people have not heard of. Since 30 August 2024 remote operators have had to run a light-touch financial vulnerability check on customers who net deposit £500 or more in a rolling 30-day period, and from 28 February 2025 that threshold dropped to £150. The check uses public records only, such as bankruptcy orders, County Court Judgments and Individual Voluntary Arrangements, and a result stays valid for six months even if you cross the threshold again. It does not look at your salary, your postcode or your job title.
For a casual darts punter the practical effect is close to nil. Deposit £200 across the fortnight of the Worlds, withdraw £120 in winnings, and you have netted £80 and never reach it. Where it bites is the customer chasing losses across the tournament, which is exactly who it was designed for. The Commission’s data suggests operators mostly run the check silently and only ask questions when a public record turns up.
Self-exclusion is wired into every licensed app
The last check is the one you set yourself. GAMSTOP is the national online self-exclusion register, and since 31 March 2020 participation has been a licence condition for every online operator in Great Britain. Register once and every licensed app and site has to stop you opening or using an account for the period you choose. A darts fan who signs up to a new app in December and finds it will not activate may simply have forgotten a GAMSTOP registration from a previous year. How it works and the exclusion lengths are on GAMSTOP’s site, and GambleAware’s free helpline is 0808 8020 133 if the checks above start to feel personal.
What this means for the app on your phone
A licensed UK betting app is running an identity match, a location fix, a rolling affordability trigger and a national exclusion lookup, mostly without telling you. The good ones make that stack invisible, which is the same shift we described in our piece on how fan behaviour is rewriting the rules for sports apps: the products people stay with are the ones where the compliance layer does not feel like a wall.
It also means the data you hand over is sensitive: identity documents, a location trail and your deposit history. Treat a betting app like a banking app, with a unique password and two-factor authentication switched on, and keep the scepticism about links in text messages that we argued for in our look at where cybersecurity is heading. If an operator asks for anything beyond the checks described here, that is the moment to ask why. You must be 18 to hold an account at all.
One thing I could not pin down is how much of the location stack each operator actually runs on a home Wi-Fi connection, as opposed to when the handset is roaming.