Trends Analysis (2021-2025)
Online Betting
We dive into the five-year performance trajectories (2021–2025) of the evaluated companies and entities in the Online Betting sector. By analysing historical trends and core metrics, this section reveals key patterns, competitive advantages, and priority improvement areas providing actionable insights into compliance drivers and hurdles to empower better decision-making and forward-thinking planning.
Trends in performance of assessed companies over time in the Online Betting Sector
Performance Trends for Assessed Online Betting Companies over the Years (2024-2025) in Rwanda
The performance of Africabet Rwanda, Gorilla Games, and BetPawa Rwanda over the assessment period highlights uneven levels of privacy maturity and differing approaches to compliance with data protection laws within the online betting sector. Given the sensitive personal and financial data processed in this sector, these trends have direct implications for regulatory, operational, and reputational risk.
Africabet Rwanda shows a notable decline in performance, dropping from 45% in 2024 to 34% in 2025. The 2024 score suggested a moderate level of privacy capability, with some governance and security controls in place. The subsequent decline indicates challenges in sustaining these measures or adapting them to evolving regulatory and operational requirements. This regression may reflect weaknesses in maintaining lawful processing practices, transparency with users, or consistent enforcement of security controls as the business scales. Africabet Rwanda faces increasing compliance risk. To reverse this trend, the organisation should reinforce governance oversight, ensure regular review and updating of privacy controls, and embed privacy by design into platform changes and customer engagement processes.
Gorilla Games demonstrates moderate improvement, increasing from 40% in 2024 to 43% in 2025. This upward movement suggests incremental strengthening of privacy and data protection practices, potentially through clearer policies, improved transparency mechanisms, or enhanced security controls. While the improvement is positive, the overall score indicates that privacy maturity remains at a developing stage rather than fully embedded across operations. Gorilla Games is moving in a positive direction but should accelerate efforts to formalise accountability structures, strengthen technical safeguards, and ensure continuous compliance monitoring to achieve sustainable alignment with data protection laws.
BetPawa Rwanda records a significant improvement, rising sharply from 23% in 2024 to 42% in 2025. This substantial increase suggests targeted remediation efforts in response to previously identified compliance gaps. Although the improvement meaningfully reduces immediate compliance risk, the scale and speed of change indicate that these enhancements may still be relatively new and not yet fully institutionalised. BetPawa Rwanda has made important progress toward compliance, but long-term sustainability will depend on embedding governance mechanisms, maintaining robust security controls, and integrating privacy by design into core systems and business processes.
BetPawa Rwanda emerges as the strongest improver, Gorilla Games shows steady but modest progress, and Africabet Rwanda exhibits regression that raises compliance concerns. These trends underscore the uneven maturity of privacy practices across the sector. The findings highlight the need for online betting operators in Rwanda to move beyond reactive compliance and adopt structured, continuous privacy governance. Sustained compliance with data protection laws will require strong accountability, regularly updated technical and organisational safeguards, and the systematic application of privacy by design. Without these measures, operators remain exposed to regulatory enforcement, operational disruption, and erosion of customer trust.
Performance Trends for Assessed Online Betting Companies over the Years (2024-2025) in Tanzania
The performance data for SportPesa Tanzania, Betika Tanzania, Bikosports, and SportyBet Tanzania reflects generally low to moderate privacy maturity across the online betting sector, with limited year-on-year movement. The trends suggest that while some operators have established baseline compliance measures, broader institutionalisation of privacy governance remains uneven.
SportPesa Tanzania maintains a stable performance at 40% in both 2024 and 2025. The absence of improvement or decline indicates that the company has implemented basic privacy and data protection controls but has not significantly advanced its compliance posture over the assessment period. The flat trend suggests that existing measures such as privacy policies, basic security controls, and data handling procedures may be in place but are not being strengthened or expanded in response to evolving regulatory and operational requirements. SportPesa Tanzania faces moderate compliance risk. To improve alignment with data protection laws, the company should move beyond baseline controls by strengthening governance oversight, enhancing technical safeguards, and embedding privacy by design into platform development and customer engagement processes.
Betika Tanzania shows modest improvement, increasing from 32% in 2024 to 35% in 2025. This upward trend suggests incremental efforts to enhance privacy practices, possibly through improved transparency mechanisms, policy updates, or enhanced security measures. Despite the improvement, overall performance remains relatively low, indicating that privacy and data protection practices are still at an early to mid-stage of maturity. Betika Tanzania is progressing in the right direction but remains exposed to regulatory and operational risk. Sustained investment in accountability structures, security controls, and continuous compliance monitoring will be necessary to consolidate gains and ensure longer-term compliance.
Bikosports demonstrates a gradual improvement from 24% in 2024 to 28% in 2025. While the increase is positive, the low absolute scores indicate significant gaps in compliance with data protection laws. The performance suggests limited implementation of core privacy principles, including lawful processing, transparency, and data security, raising concerns given the sensitive financial and personal data processed in the betting context. Bikosports faces elevated compliance risk. Urgent attention is required to establish foundational privacy governance, implement minimum technical and organisational safeguards, and align operations with statutory data protection requirements.
SportyBet Tanzania remains relatively stable, recording a slight decline from 41% in 2024 to 40% in 2025. Although the change is marginal, it suggests challenges in sustaining prior improvements or in adapting privacy practices to changing operational demands. The performance indicates moderate maturity but limited progression toward stronger compliance frameworks. SportyBet Tanzania should focus on stabilising and strengthening its privacy controls, improving governance and oversight, and ensuring privacy considerations are systematically integrated into system updates and business processes.
Across the Tanzanian online betting sector, performance remains largely static at low to moderate levels of compliance. SportPesa Tanzania and SportyBet Tanzania demonstrate baseline maturity but limited progression, Betika Tanzania shows modest improvement, and Bikosports remains at an early stage of compliance. The findings underscore the need for betting operators in Tanzania to move beyond basic compliance and adopt more structured, proactive privacy governance. Sustained compliance with data protection laws will require embedding accountability, strengthening technical safeguards, and applying privacy by design across platforms. Without such measures, operators remain exposed to regulatory enforcement, operational disruption, and erosion of customer trust in an increasingly scrutinised and data-intensive sector.
Performance Trends for Assessed Online Betting Companies over the Years (2023-2025) in Mauritius
The performance data for Supertote, StevenHills, Totelepep Ltd, and William Hill highlights sharp contrasts in privacy maturity and compliance with data protection laws across the online betting sector. The trends reveal limited progress, persistent low compliance among some operators, and moderate but uneven improvement among others.
Supertote's performance shows moderate fluctuation rather than sustained improvement. After scoring 40% in 2023, the company improved to 45% in 2024, as noted in last year's analysis, before declining back to 40% in 2025. The earlier assessment correctly identified the 2024 increase as a positive but modest step toward improved compliance. The regression in 2025 suggests that the improvements observed in 2024 were not fully institutionalised. This pattern indicates reliance on short-term remediation rather than embedded governance and continuous privacy risk management. Supertote maintains a baseline level of compliance but remains exposed to regulatory and operational risk. To achieve sustainable alignment with data protection laws, the organisation must strengthen accountability structures, maintain up-to-date security controls, and embed privacy by design into core systems and customer interactions.
StevenHills continues to demonstrate persistently poor performance, with scores remaining critically low at 5.6% in 2023, 4% in 2024, and only marginally improving to 6% in 2025. Last year's analysis highlighted significant and systemic gaps in privacy practices, and the 2025 data confirms that these issues remain largely unaddressed. The consistently low scores indicate minimal compliance with fundamental data protection principles, including lawful processing, transparency, data security, and accountability. StevenHills faces severe regulatory, operational, and reputational risk. Immediate intervention is required to establish even basic compliance with data protection laws. Without urgent implementation of governance structures and security safeguards, the organisation remains highly vulnerable to enforcement action and data breaches.
Totelepep Ltd records consistently low performance, scoring 6% in both 2024 and 2025. Although historical data for 2023 is unavailable, the flat and extremely low scores indicate negligible progress in establishing privacy and data protection controls. The absence of improvement suggests that privacy compliance is not being prioritised and that foundational requirements, such as clear privacy notices, lawful processing frameworks, and minimum security measures, are largely absent. Totelepep Ltd is at an early and high-risk stage of privacy maturity. Urgent investment is required to meet statutory data protection obligations, implement minimum safeguards, and reduce exposure to regulatory sanctions and consumer harm.
William Hill demonstrates moderate and consistent improvement, increasing from 41% in 2024 to 44% in 2025. While earlier data is not available, the upward trend suggests strengthening governance, improved security controls, and better alignment with data protection requirements. Compared to other operators in the sector, William Hill shows relatively stronger privacy maturity, though its performance still indicates room for further enhancement to meet higher industry and regulatory standards. William Hill is comparatively well positioned but must continue to enhance governance oversight, transparency mechanisms, and privacy by design practices to maintain compliance in a highly regulated and data-intensive sector.
Last year's analysis identified Supertote as showing modest improvement and StevenHills as persistently non-compliant. The 2025 data confirms these conclusions: Supertote's gains were not sustained, while StevenHills remains critically weak. The inclusion of Totelepep Ltd reinforces concerns about systemic low compliance in parts of the sector, while William Hill provides evidence that gradual, structured improvement is achievable. The online betting sector continues to exhibit significant disparities in compliance with data protection laws and privacy practices. William Hill and, to a lesser extent, Supertote demonstrate moderate compliance, though sustainability remains a concern. StevenHills and Totelepep Ltd remain at critically low levels of privacy maturity, posing substantial regulatory and reputational risks. Across the sector, long-term compliance will depend on moving beyond reactive measures toward embedded governance, consistent security controls, and privacy by design to protect customer data and meet evolving regulatory expectations.
Performance Trends for Assessed Online Betting Companies over the Years (2023-2025) in Zimbabwe
The performance data for Bezbets, Africabet, MrXbet, and Pinnacle Sports indicates gradual improvement across much of the online betting sector, albeit from a low baseline. While some operators are making incremental progress, overall privacy maturity remains limited, and compliance risks persist due to the sensitive personal and financial data processed in this sector.
Bezbets demonstrates a slow but consistent improvement over the assessment period, increasing from 29.4% in 2023 to 30.0% in 2024 and 32.0% in 2025. Last year's analysis correctly identified only marginal progress between 2023 and 2024, and the 2025 data confirms that improvement has continued, though at a gradual pace. The trend suggests that Bezbets has begun addressing certain privacy and data protection gaps, possibly through policy updates or basic security enhancements. However, the overall performance remains low, indicating that privacy governance, accountability, and technical safeguards are not yet sufficiently embedded. Bezbets remains exposed to moderate-to-high compliance risk. To move beyond incremental gains, the organisation must invest in structured governance frameworks, strengthen technical and organisational security measures, and ensure continuous compliance monitoring aligned with data protection laws.
Africabet shows a notable improvement from 22.0% in 2023 to 29.0% in 2024 and further to 35.0% in 2025. Last year's analysis highlighted meaningful progress but emphasised that significant gaps remained. The continued improvement in 2025 confirms that Africabet has sustained its remediation efforts. Despite this progress, the absolute score indicates that privacy practices are still developing and may not yet be consistently applied across all operations. Africabet has reduced immediate compliance risk but remains below industry best practice. Sustained improvement will require institutionalising accountability, enhancing transparency, and embedding privacy by design into systems and customer interactions.
MrXbet records an improvement, rising from 27.0% in 2024 to 34.0% in 2025. While earlier data is not available, the magnitude of the increase suggests focused corrective action to strengthen privacy and data protection practices. The improvement likely reflects enhancements in security controls, privacy policies, or compliance processes, though the overall score indicates that maturity remains moderate at best. MrXbet is on a positive trajectory but must ensure that improvements are sustained through formal governance structures, ongoing risk assessments, and consistent operational application of privacy principles.
Pinnacle Sports demonstrates a stronger and most consistent performance in this group, improving from 41.0% in 2024 to 45.0% in 2025. While earlier data is unavailable, the upward trend indicates comparatively higher privacy maturity and more established compliance mechanisms. Despite leading peers, the score suggests that further enhancement is needed to fully align with evolving regulatory expectations and best practices. Pinnacle Sports is comparatively well positioned but should continue strengthening governance oversight, technical safeguards, and privacy by design practices to maintain compliance in a high-risk, data-intensive environment.
Last year's analysis concluded that Bezbets and Africabet had made only modest progress, with both remaining at low levels of compliance. The 2025 data refines this assessment: Bezbets continues to improve slowly, while Africabet has made more meaningful gains. The inclusion of MrXbet and Pinnacle Sports provides additional context, demonstrating that stronger progress is achievable, though not yet widespread across the sector. The online betting sector continues to exhibit incremental but uneven progress in compliance with data protection laws and privacy practices. Pinnacle Sports and Africabet show the strongest upward trajectories, while Bezbets and MrXbet remain at relatively early stages of maturity. Across all operators, long-term compliance will depend on moving beyond ad hoc remediation toward embedded governance, robust security controls, and systematic application of privacy by design to protect customer data and meet regulatory expectations.
Performance Trends for Assessed Online Betting Companies over the Years (2023-2025) in Kenya
The performance of Betika, 1xBet Kenya, SportPesa Kenya, and BetPawa Kenya shows divergent trajectories in privacy maturity and compliance with data protection laws. While some operators have made significant progress in strengthening their privacy practices, others continue to demonstrate volatility or remain at relatively low levels of compliance, reflecting uneven sector-wide maturity.
Betika demonstrates a recovery and marked improvement in 2025. After declining slightly from 37.91% in 2023 to 35% in 2024, Betika's score increased significantly to 52% in 2025. Last year's analysis highlighted challenges in maintaining momentum and the need for strengthened data protection measures. The 2025 results indicate that these gaps have been actively addressed. The scale of improvement suggests focused efforts to enhance governance, transparency, and security controls, potentially including clearer privacy notices, improved consent management, and stronger technical safeguards. Betika has materially reduced its compliance risk and is transitioning toward moderate privacy maturity. To sustain this progress, the organisation should continue embedding accountability structures and privacy by design into its platforms and operational processes.
1xBet Kenya shows steady improvement, increasing from 25% in 2024 to 37% in 2025. While earlier data is unavailable, the upward trend indicates ongoing remediation of privacy and data protection gaps. Despite this progress, the overall score suggests that privacy practices remain developing and may not yet be consistently applied across all business operations. 1xBet Kenya is moving in a positive direction but remains exposed to compliance risk. Sustained improvement will depend on formalising governance mechanisms, strengthening security controls, and ensuring continuous compliance monitoring.
SportPesa Kenya exhibits relative stability, with a slight decline from 39% in 2024 to 38% in 2025. While the change is marginal, it suggests challenges in advancing privacy maturity beyond a moderate baseline. The stagnation indicates that existing controls may not be evolving in line with regulatory expectations or operational complexity. SportPesa Kenya faces a risk of compliance stagnation. To avoid regression, the organisation should prioritise periodic review of privacy controls, enhanced governance oversight, and deeper integration of privacy considerations into system updates and customer engagement processes.
BetPawa Kenya demonstrates the most significant improvement among the assessed operators, rising sharply from 20% in 2024 to 46% in 2025. This substantial increase suggests targeted remediation efforts to address previously identified compliance gaps. While encouraging, the magnitude of improvement indicates that these measures may still be relatively recent and require sustained institutionalisation. BetPawa Kenya has significantly reduced its immediate compliance risk and is approaching moderate privacy maturity. Continued focus on governance, accountability, and privacy by design will be critical to sustaining compliance with data protection laws.
Last year's analysis focused primarily on Betika, identifying a slight decline and the need for stronger privacy measures. The 2025 data confirms that Betika has responded effectively to these concerns, achieving a substantial improvement. The inclusion of additional operators highlights broader sector trends: while meaningful progress is achievable, as demonstrated by Betika and BetPawa Kenya, sustainability and consistency remain key challenges for others. Overall, there is improvement but uneven compliance with data protection laws. Betika and BetPawa Kenya emerge as strong improvers, while 1xBet Kenya shows steady progress. SportPesa Kenya remains relatively stable but risks stagnation without renewed focus. To achieve sustainable privacy maturity, all operators must move beyond reactive compliance and embed strong governance, robust security safeguards, and privacy-by-design principles across their platforms and business operations.
Performance Trends for Assessed Online Betting Companies over the Years (2023-2025) in Uganda
The performance of Fortebet, 1xBet, BetPawa Uganda, and 22Bet Uganda illustrates divergent levels of privacy maturity across the sector. While some operators demonstrate incremental or significant improvement, others show stagnation or volatility, underscoring uneven compliance with data protection laws in a high-risk, data-intensive environment.
Fortebet's performance remains largely stable but flat, recording 33.30% in 2023, declining slightly to 32% in 2024, and improving marginally to 34% in 2025. Last year's analysis correctly identified limited progress and a lack of meaningful advancement in privacy practices. The 2025 result confirms that Fortebet has maintained baseline controls but has not yet transitioned to a more mature, governance-driven privacy framework. Improvements appear incremental rather than transformative. Fortebet faces ongoing compliance risk due to slow progress. To strengthen alignment with data protection laws, the organisation should prioritise formal governance structures, regular privacy risk assessments, and stronger technical and organisational safeguards.
1xBet demonstrates a mixed trajectory. Following a sharp improvement from 11.10% in 2023 to 32% in 2024, the score declined to 26% in 2025. Last year's analysis characterised 1xBet's 2024 performance as a significant improvement, and the 2025 data suggests that these gains were not fully sustained. This regression indicates potential weaknesses in institutionalising privacy controls or maintaining compliance momentum after initial remediation efforts. 1xBet's volatility signals elevated compliance and enforcement risk. The organisation must focus on embedding accountability, ensuring consistent application of privacy controls, and maintaining ongoing compliance oversight rather than relying on short-term corrective actions.
BetPawa Uganda shows steady improvement, increasing from 32% in 2024 to 34% in 2025 (with no earlier data available). While the improvement is modest, it suggests continued effort to strengthen privacy and data protection practices. The trajectory indicates emerging maturity, though overall performance remains at a developing stage. BetPawa Uganda is progressing in the right direction but must accelerate efforts to formalise governance, strengthen security controls, and integrate privacy by design into systems and operational processes to reduce compliance risk.
22Bet Uganda demonstrates the strongest improvement among the assessed operators, increasing significantly from 32% in 2024 to 47% in 2025. This sharp rise suggests targeted and effective remediation of previously identified gaps in privacy governance and data protection controls. While encouraging, the scale of improvement suggests that these measures may still be relatively recent and require sustained oversight to ensure durability. 22Bet Uganda has materially reduced its immediate compliance risk and is approaching moderate privacy maturity. Continued focus on institutionalising controls, governance oversight, and continuous monitoring will be critical to sustaining compliance with data protection laws.
Last year's analysis concluded that Fortebet showed stagnation while 1xBet made substantial progress. The 2025 data refines this assessment: Fortebet remains largely unchanged, while 1xBet's gains have partially reversed, highlighting sustainability challenges. The inclusion of BetPawa Uganda and 22Bet Uganda demonstrates that meaningful progress is achievable when remediation efforts are effectively implemented and prioritised.
Overall, the Uganda online betting sector shows uneven progress toward compliance with data protection laws. 22Bet Uganda emerges as the strongest improver, while BetPawa Uganda demonstrates gradual advancement. Fortebet and 1xBet remain exposed to compliance risks due to stagnation and volatility, respectively. To achieve sustainable privacy maturity, operators must move beyond reactive remediation and adopt embedded governance, robust security safeguards, and privacy-by-design principles across their platforms and business operations.