Betika and OdiBets Executives Detained Over Kenya Data Breach
Betika and OdiBets Executives Detained in Kenya – High Court Ruling Intensifies Data Protection Enforcement in Gambling Sector
Key Takeaways
- A Kenyan High Court ruling confirmed that Betika obtained personal data from Safaricom, affecting up to 29.9 million customers.
- Betika founders George Mburu and Chris Mwirigi are in police detention and face multiple criminal charges, including handling stolen data and money laundering.
- Odibets executive Andrew Alingula has also been detained in connection with the alleged commercial use of the same data.
- The case follows forensic investigations and comes amid tighter gambling oversight under Kenya’s Gambling Regulatory Authority.
High Court Confirms Data Breach Allegations Involving Betika
A federal High Court in Kenya ruled on 13 May that a complaint filed by Benedict Kabugi Ndungu in 2019 had reported a Safaricom data breach to police and regulators. The complaint was submitted to the Director of Criminal Investigations, Mohamed I. Amin, and to the Director General of the Gambling Regulatory Authority of Kenya, known as GRAK.
According to the court findings, Betika, operating under the trading name Shop and Deliver Limited, had obtained data from Safaricom through former employees. The disclosed information is reported to include personal details of up to 29.9 million customers.
The data allegedly contained full names, national identity card numbers, M-Pesa transaction histories, geo location data, IMEI numbers, betting patterns, and detailed information about deposits and withdrawals. Authorities describe the case as a systemic compromise of data, identified through forensic analysis of WhatsApp communications conducted by the Directorate of Criminal Investigations.
For users of betting platforms, the scope of the data involved highlights the potential exposure of both identity and financial transaction records, as well as behavioral information linked to betting activity.
Criminal Charges and Detention of Company Executives
Following the investigation, Betika founders George Mburu and Chris Mwirigi have been detained by police and are awaiting legal process. The charges they face include handling stolen user data, computer related fraud carrying a potential sentence of at least 20 years of imprisonment, money laundering, and conspiracy to commit a felony.
The allegations state that the data was obtained with the intention of building a purpose built audience database for marketing purposes. Authorities argue that the information was acquired from former Safaricom employees and used for commercial objectives.
Allan Mzungu, Senior Partner at Nairobi based MMS Advocates, stated that it would be unprecedented for directors of betting companies to face criminal sanctions for data related offences. He noted that there is a real possibility of criminal charges being brought against company directors in connection with the case.
The legal process is ongoing, and the executives remain in detention pending further proceedings.
Odibets Also Faces Criminal Investigation
The case extends beyond Betika. A similar forensic investigation has led to criminal prosecution involving another major Kenyan operator, Odibets.
Andrew Alingula of Odibets has been detained in connection with the alleged receipt of the same data. He is accused of being a recipient of data obtained for commercial purposes between June 2018 and May 2019.
Authorities allege that the data in question was shared or used within the betting industry during that period. As with Betika, the investigation centers on the commercial exploitation of personal and transactional information without proper authorization.
For users comparing betting platforms in Kenya or internationally, the involvement of multiple operators underscores how data handling practices can become the subject of criminal scrutiny.
Regulatory Tightening Under Kenya’s Gambling Reforms
The enforcement action comes amid broader gambling reforms in Kenya. The Gambling Regulatory Authority of Kenya has been granted expanded powers to conduct vetting, due diligence, and checks on gambling operations. This includes oversight of licensees, shareholders, directors, owners, and staff.
The federal government has stated that it aims to ensure that gambling activities do not harm citizens. President William Ruto recently emphasized the need for new gambling regulations, stating that the scale of participation cannot continue unchecked and that regulatory intervention is necessary.
The High Court ruling and subsequent detentions indicate that enforcement is not limited to administrative sanctions but may extend to criminal proceedings against company leadership.
For industry participants, this signals a regulatory environment in which compliance obligations may include strict controls over data sourcing, storage, and marketing practices.
Implications for Data Governance in the Gambling Sector
The case centers on the alleged acquisition and use of highly sensitive personal and financial data. The inclusion of M-Pesa transaction histories, geo location data, and betting patterns illustrates how interconnected telecommunications and gambling ecosystems can be.
When betting operators rely on third party data or telecommunications records, questions of consent, authorization, and lawful processing become central. In this instance, authorities argue that the data was obtained from former employees of Safaricom rather than through authorized commercial channels.
The forensic analysis of WhatsApp communications by investigators also demonstrates the role of digital evidence in uncovering potential data misuse.
For users, the case highlights how personal and betting related information can be subject to legal disputes and criminal investigations when data governance fails.
Our Assessment
The High Court ruling and subsequent detentions of executives at Betika and Odibets mark a significant enforcement action in Kenya’s gambling sector. Authorities allege that sensitive customer data from Safaricom was obtained and used for commercial purposes without authorization. Company founders and executives now face criminal charges including computer related fraud, money laundering, and conspiracy to commit a felony. The case unfolds alongside broader gambling reforms that expand regulatory scrutiny over operators and their leadership, signaling a stricter approach to compliance and data protection within the industry.
We have imposed strict editorial guidelines on ourselves and explain our testing methods openly and comprehensively. We also communicate transparently how our work is financed. This site may contain tracking links, but this does not influence our objective view in any way.
