Consent and compliance
Designing Consent Capture and Preference Centers
Good consent capture asks a clear question, starts with nothing selected, lets the customer choose each option separately and makes the same choices easy to change later in a preference center. Gambling regulators in Great Britain, Ontario and Australia add their own requirements on top of general privacy law.
In short
- Start every marketing option unselected: the UK GDPR guidance says "pre-ticked boxes" do not count as consent.
- Let customers choose by product and channel; in Great Britain this is required for remote casino, bingo and betting licensees.
- In Australia, opening an account must not require agreeing to direct marketing.
- Put the same matrix in the account area so customers can change it at any time.
Scope and limits. Covers screen design for registration and preference centers. The legal comparison is on direct marketing consent rules by market. We describe patterns; we have not tested any operator's screens.
What valid consent looks like
The Information Commissioner's Office (ICO) quotes the UK GDPR definition of consent: "any freely given, specific, informed and unambiguous indication of the data subject's wishes", given "by a statement or by a clear affirmative action". It adds that "Silence, pre-ticked boxes or inactivity should not therefore constitute consent."
Three design rules follow:
- Nothing preselected. Every marketing checkbox or toggle starts off.
- Separate choices. The ICO recommends "granular options to consent separately to separate purposes". One "I agree to everything" box does not do this.
- Plain wording. Say who will contact the customer, about what and by which channel. Store the exact text with a version number.
Gambling rules on top
| Market | Rule | Source |
|---|---|---|
| Ontario | Inducements may be communicated through direct marketing only "after receiving active player consent" | AGCO Standard 2.05 |
| Australia (wagering) | Customers must be able to open an account without being required to "consent to receive direct marketing" | National Consumer Protection Framework, as summarized by the Victorian Gambling and Casino Control Commission (VGCCC) |
Code 5.1.12 also limits any extra confirmation screen. If you ask a customer to confirm their selection, the screen may only confirm or decline it, with one click to proceed; it must not encourage the customer to change their choice. In Great Britain, remote casino, bingo and betting licensees must also offer opt-in by product and by channel; Managing preferences across products and channels sets out the full matrix. Privacy and electronic marketing law is compared in PECR, CAN-SPAM, CASL and Spam Act rules side by side.
Registration screen pattern
Example, illustrative only:
| Choice shown | Text message | Phone | |
|---|---|---|---|
| Betting offers and news | Off | Off | Off |
| Casino offers and news | Off | Off | Off |
Below the table, one line explains that the choices can be changed at any time in the account area, with a link to the privacy notice. Do not place this block between the customer and the "create account" button in a way that implies it is required.
The preference center
- Show the same matrix as registration, with the current values and the date each was last changed.
- Saving a change takes effect for every system; propagating preference changes covers the plumbing.
- Offer a single "stop all marketing" control that records an objection, separate from the individual switches.
- Keep protective and account messages out of this page, because customers cannot and should not switch them off here. See safeguarding overrides and protective messages.
Common design faults
- A master toggle that switches every channel on at once.
- Promotional copy next to the opt-in that frames the choice ("Don't miss out").
- An opt-out that only works on one channel when the customer meant all of them.
- No record of what the screen said when the customer agreed.
When you compare tools for this job, use consent and preference platform criteria. Opt-outs and their timing are covered in withdrawal and opt-out handling.
Accessibility and clarity
Preference screens are used by every kind of customer, including people who use screen readers, keyboards or zoom. Use real checkboxes or switches with visible labels, keep the same order of products and channels everywhere, and make sure the current state is announced, not only shown by color. Short labels such as "Casino offers by email" are easier to understand than a grid of icons.
Questions
Can we add a "select all" button to the preference matrix?
A "select all" that the customer actively presses is still a clear action, but it should not be the default or the most prominent control, and each option must stay individually changeable.
Should the preference center show the wording the customer agreed to?
It helps customers understand their choices, and it lets support staff answer questions from the same record.
Sources
- Information Commissioner's Office, What is valid consent?, page dated August 4, 2026 (under review after the Data (Use and Access) Act).
- Gambling Commission, LCCP Condition 5.1.12 - Direct marketing preferences, no date shown.
- Victorian Gambling and Casino Control Commission, National Consumer Protection Framework, updated June 12, 2026.
- Alcohol and Gaming Commission of Ontario, Registrar's Standards for Internet Gaming, marketing and self-exclusion sections updated May 14, 2026.
Every source was read on October 28, 2026. How we choose sources: data sources.
Safer gambling support is listed on the safer gambling page.