The Malta Gaming Authority would like to inform its licensees of updates made to the Incident Report mechanism available through the Licensee Portal The information hereunder outlines relevant guidance and procedures for the submission of an Incident Report through the updated reporting instrument entitled the ‘Technical – Information Security Incident’.

As mandated by Articles 37(2)(c) and (d) of the Gaming Authorisations and Compliance Directive (Directive 3 of 2018), “Licensees shall notify the Authority forthwith, and in any case no later than three (3) working days after, the following:

(c) Any breach of the licensee’s information security that adversely affects the confidentiality of information relating to players;

Advertisement

(d) Any breach of the licensee’s information security that precludes players from accessing their accounts for a period exceeding twelve (12) hours.”

In this regard, Licensees are obliged to submit an Incident Report in order to notify the Authority of the circumstances relating to an information security breach that meet the above specified criteria. Additionally, Licensees are advised to remain mindful of any further obligations emanating from the General Data Protection Regulation (EU/2016/679) and any relevant legislation.

The Technical – Information Security Incident option will be accessible through the “New/Change” dropdown menu via the Portal. Upon selection, users will be directed to the applicable sections of the ‘Technical – Information Security Incident’ where all compulsory fields and any relevant documentation must be submitted to the Authority.

Upon submission, the Incident Report shall undergo review by the Authority. Any missing information that may be identified by the Authority, shall be requested accordingly from the Licensee. It is imperative that any pending clarifications are addressed in a timely manner.

If no further clarifications are deemed necessary by the Authority, the Incident Report will be closed off accordingly, and any relevant documentation will be securely filed for record-keeping purposes.

Advertisement

Any Incident Reports left in ‘Draft’ form (i.e. opened but not effectively submitted) for a period of ninety (90) days shall be automatically discarded.

BlueBet has been fined AU$50,000 by the Victorian Gambling and Casino Control Commission (VGCCC) for breaching gambling advertising regulations.

The company was found guilty of 43 charges related to displaying gambling advertisements on or above public roads, contravening the Gambling Regulation Act 2003.

The charges stemmed from an investigation initiated by VGCCC, following a complaint from a member of the public. The breaches occurred over a two-week period in August and September 2022, with BlueBet’s gambling advertisements appearing on digital billboards at various locations, including Point Cook, Laverton, Rockbank and Ravenhall.

Advertisement

Magistrate Greg Thomas, overseeing the case, expressed scepticism about BlueBet’s defence that it was unaware of the breaches, given the strategic placement of the billboards to target males aged 15-54 years old. While no conviction was recorded, Magistrate Thomas noted the high degree of negligence exhibited by BlueBet.

VGCCC CEO Annette Kimmitt AM said: “Gambling advertising has no place on public roads where it is readily visible to children and other vulnerable groups. These places are especially difficult to avoid as part of day-to-day activities. This decision sends a clear message to wagering providers that flout these protections for our community.”

Although Magistrate Thomas considered imposing a higher fine and recording a conviction, he took into account BlueBet’s guilty plea, cooperation with VGCCC and measures taken to prevent future breaches. BlueBet has implemented changes to prevent similar incidents and has cooperated with VGCCC throughout the process.