The iGaming sector presents regulators with the challenge of balancing market innovation with robust player protection. In the Netherlands, this delicate equilibrium is vigilantly maintained by the Kansspelautoriteit (KSA), the Dutch Gaming Authority. Their recent actions against Hillside, the operator behind the globally recognized bet365 brand, underscore a firm commitment to ensuring that licensed operators adhere strictly to social responsibility mandates, particularly concerning player affordability.
The KSA’s role is not merely to license operators but to actively supervise the market, ensuring fair play, preventing addiction, and combating illegal gambling. Established in 2012, the KSA became particularly crucial with the opening of the regulated online gambling market in the Netherlands in October 2021. Their mandate is broad, encompassing everything from combating illegal offerings to overseeing advertising practices and, critically, enforcing duty of care protocols for licensed entities. The authority’s proactive stance aims to create a safe and responsible environment for Dutch players, a vision clearly articulated in its comprehensive agenda for 2026, which prioritizes player protection, tackling the black market, preventing financial crime, and monitoring advertising.
The Heart of the Matter: Affordability and Duty of Care
At the core of the KSA’s recent intervention with bet365 was the finding that the operator’s social responsibility measures, often referred to as ‘duty of care,’ were simply not up to par. For those in the know, the concept of duty of care in gambling is paramount. It dictates that operators must take active steps to protect players from harm, including excessive gambling. This isn’t just about offering self-exclusion tools; it extends to proactive monitoring and intervention. A cornerstone of this duty in the Netherlands, as in many other regulated markets, is the affordability assessment.
The KSA’s investigation revealed specific shortcomings in bet365’s approach. One notable issue highlighted a case from 2021 where the betting giant utilized a questionnaire-based format for players to declare their income. While seemingly a step towards compliance, the KSA deemed this format insufficient for truly gauging a player’s financial capacity to gamble. More critically, the authority discovered that bet365’s calculations for affordability checks were flawed. These faulty calculations led to incorrect net deposit limits, inadvertently allowing players to deposit and potentially lose more money than they could genuinely afford. This is a significant breach because net deposit limits are a critical safeguard.
To put this into perspective, Dutch regulations stipulate clear boundaries for player deposits. For young adults, defined as individuals between 18 and 24 years old, the baseline net deposit limit is set at EUR 300. For adults aged 24 and above, this limit is EUR 700. Should a player wish to exceed these default limits, they must undergo a thorough assessment to demonstrate their financial capability to do so. If an operator cannot confirm a player’s ability to afford a higher limit, deposits exceeding the base threshold must be blocked. This regulatory framework is designed to be a robust barrier against problem gambling, and any deviation undermines its fundamental purpose.
Bet365 and the Broader Industry Landscape
Bet365, operated by Hillside, is a titan in the global online gambling industry, renowned for its extensive sportsbook and casino offerings. Its reach spans numerous regulated markets worldwide, and its entry into the Dutch market was a significant development. However, operating in diverse jurisdictions means navigating a patchwork of regulatory requirements, often with subtle but crucial differences. The KSA’s warning serves as a stark reminder that even industry leaders must tailor their compliance mechanisms precisely to local legislation.
The incident with bet365 is not an isolated one in the broader context of evolving gambling regulation. Across Europe, regulators are intensifying their focus on player protection. The UK Gambling Commission (UKGC), for instance, has repeatedly sanctioned operators for social responsibility failings, including inadequate affordability checks and responsible gambling interactions. Similarly, the Malta Gaming Authority (MGA) has tightened its grip on licensees, emphasizing anti-money laundering (AML) and responsible gaming protocols. These actions signal a global shift towards a more paternalistic approach to regulation, where the onus is increasingly on operators to proactively protect vulnerable players.
The financial implications of such regulatory breaches can be substantial. Beyond fines, which can run into the millions, operators face reputational damage, increased scrutiny, and, in severe cases, the potential revocation of their operating licenses. For a company like Hillside, losing its permit to offer online gambling in a mature European market like the Netherlands would represent a significant commercial setback. This threat serves as a powerful deterrent, compelling operators to invest heavily in robust compliance frameworks.
Technological Imperatives and Market Dynamics
The KSA’s directive highlights the critical role technology must play in ensuring compliance. The days of rudimentary checks are fast fading. Modern social responsibility frameworks demand sophisticated technological solutions. This includes leveraging artificial intelligence (AI) and advanced data analytics to monitor player behavior in real-time, identify potential indicators of harm, and trigger timely interventions. Algorithms can track deposit patterns, playing duration, changes in betting habits, and other behavioral markers that might suggest a player is developing issues. Implementing these technologies effectively is no small feat, requiring significant investment in infrastructure and expertise.
Moreover, the broader online gambling industry is experiencing rapid technological evolution, influencing everything from game development to payment processing. The rise of crypto gambling, for instance, introduces new layers of complexity for regulators. While offering anonymity and rapid transactions, platforms linked to crypto casinos must still navigate the same stringent anti-money laundering (AML) and responsible gaming requirements as traditional fiat-based operations.
The Dutch online gambling market itself, despite its relatively recent full regulation, has seen significant growth. In its first year of regulation, the market generated substantial gross gaming revenue (GGR), attracting numerous licensed operators. This growth, however, comes with increased responsibility. The KSA’s firm stance against bet365 sends a clear message to all licensed entities in the Netherlands: compliance with duty of care is not optional, and lax approaches will not be tolerated. This scrutiny extends to how operators manage their customer databases, ensure age verification, and promote responsible advertising.
Looking Ahead: A Future of Enhanced Scrutiny
The KSA has given Hillside a strict four-week deadline to rectify its failings. Within this timeframe, bet365 must demonstrate that it has implemented adequate affordability assessment processes and that its calculations for net deposit limits are accurate and protective. This means ensuring that any player who can no longer afford to gamble within their self-set limits is prevented from doing so. The authority’s warning is clear: failure to comply will result in further sanctions, potentially including the ultimate penalty of license revocation.
This incident underscores a broader trend in the regulated online gambling sector: a movement towards more granular and proactive regulatory oversight. Regulators are increasingly demanding not just adherence to the letter of the law but also to its spirit, emphasizing player welfare above all else. For operators, this means investing more in their compliance departments, adopting cutting-edge technologies for player monitoring, and fostering a culture of responsible gambling throughout their organizations.
The KSA’s actions against a prominent operator like bet365 will undoubtedly resonate throughout the industry, both within the Netherlands and internationally. It serves as a potent reminder that the privilege of operating in a regulated market comes with significant responsibilities, particularly when it comes to safeguarding players. As the online gambling sector continues its expansion, driven by technological advancements and evolving consumer preferences, the imperative for robust and adaptive regulatory frameworks, coupled with unwavering enforcement, will only grow stronger.
The Global Ripple Effect: Raising the Regulatory Bar
The enforcement action against bet365 serves as a microcosm of a much larger, systemic shift within the European gambling theater. As the Netherlands tightens its grip, other jurisdictions are recognizing that the “Dutch model” of strict deposit caps and proactive intervention represents a new era of consumer safety. Historically, the industry operated on a reactive model—offering help only after a player exhibited signs of distress. The KSA’s current trajectory, however, mandates a predictive approach. By requiring operators to verify financial means before high-velocity play occurs, the regulator is effectively shifting the burden of proof from the consumer to the corporation.

This shift is creating a massive demand for “RegTech”—specialized regulatory technology designed to bridge the gap between massive data sets and legal compliance. Many operators are now pivoting toward Open Banking solutions to automate affordability checks. This technology allows for secure, one-time access to a player’s financial data, providing an instantaneous, objective assessment of discretionary income. This moves the industry away from the flawed “self-declaration” methods of the past and toward a high-fidelity data environment. While this raises valid questions regarding data privacy, it appears to be the only viable path forward for operators wishing to maintain their licenses in the increasingly scrutinized European market.
Strengthening the Social Contract and Market Health
The tension between market growth and harm prevention also touches upon the philosophical foundations of “Duty of Care.” In the Netherlands, this is no longer a vague legal concept but a quantified social contract. The KSA’s roadmap suggests that “responsible gaming” will soon encompass more than just financial limits; it will likely include mandatory “cool-off” periods triggered by behavioral markers like speed of play or late-night session duration, regardless of a player’s bankroll. This holistic view suggests that even a wealthy player can be deemed “at risk” if their pattern of play suggests a loss of cognitive control.
Furthermore, the KSA is increasingly focused on the “channelization” rate—the percentage of players using legal, licensed sites versus the illegal black market. In 2025, reports indicated that while the number of active accounts rose, the total gross gaming revenue (GGR) for licensed operators saw a slight dip as players adjusted to stricter deposit limits. Critics argue that over-regulation will drive players toward offshore “shadow” casinos that accept cryptocurrency and offer no protections. To counter this, the Dutch government is pairing its domestic enforcement with a 37.8% tax rate for 2026 and aggressive ISP blocking of unlicensed domains. This strategy aims to create a “walled garden” that prioritizes the long-term health of the citizenry over short-term tax windfalls.
A New Era of Accountability and Renewal
The implications of the Hillside warning extend into the very structure of the Dutch licensing system. As the first wave of five-year permits issued in 2021 approaches expiration in October 2026, the KSA has introduced even more rigorous renewal requirements. Operators seeking to stay in the market must now submit a formal “Exit Plan,” detailing how they would wind down operations and return player funds if they fail to meet compliance standards. This ensures that the KSA maintains ultimate leverage over even the largest industry titans.
The outcome of the bet365 directive will likely set the global precedent for how net deposit limits are calculated and audited. Operators are now on notice: the era of “compliance by checkbox” has ended. In its place is a data-driven, audited regime where the financial and behavioral health of the player is considered the primary metric of an operator’s corporate viability. For the Dutch player, this translates to a safer, more transparent environment; for the global industry, it signifies that the price of doing business in a premium, regulated market has permanently increased.