Privacy & POPIA
FlyBet South Africa Privacy Policy: opt-out no longer counts as consent under POPIA
Amended POPIA Regulations changed how marketing consent works, and the Information Regulator has grown far more active since. Here's what that means for the data this website processes.
Consent rules
What changed for marketing consent in 2025
Amended POPIA Regulations, which took effect on 17 April 2025, changed how consent for direct marketing communications is treated: an opt-out mechanism, where silence or inaction is taken as agreement, no longer satisfies POPIA's consent requirement. Active opt-in, a clear affirmative action, is now the standard, and organisations processing personal information in South Africa are expected to reflect this in every consent flow, including newsletter sign-ups, WhatsApp updates and promotional SMS.
This website, as an independent informational resource rather than the operator of gambling services, only collects information voluntarily submitted through contact or engagement features, and does not process account-level personal information belonging to FlyBet South Africa's own registered players.
Regulator activity
Why data breach reporting is under more scrutiny than ever
Security compromise notifications submitted to South Africa's Information Regulator rose from 202 in the 2021/22 financial year to 2,898 in 2025/26 year-to-date as at March 2026, a roughly 14-fold increase over four years. Since 1 April 2025, all such notifications must be lodged through the Regulator's eServices portal rather than by email, a process change intended to tighten monitoring and reduce delayed reporting.
This surge reflects a genuinely more assertive regulator, not simply more breaches occurring: the Information Regulator has explicitly stated it is shifting toward proactive, sector-targeted audits rather than waiting for complaints, with retail and direct marketing named among its priority sectors for the 2026/27 financial year.
Enforcement reality
What POPIA non-compliance actually costs
POPIA sets administrative fines of up to R10 million per infringement, alongside criminal penalties of up to 10 years' imprisonment for the most serious contraventions. In April 2026, the Polokwane High Court confirmed the first publicly recorded court-enforced POPIA fine, a reduced R250,000 given the limited scope of the breach involved, establishing that these figures are not merely theoretical ceilings.
Three separate enforcement notices were issued within a single 21-day window in May and June 2026 alone, against a training college, a mining company and a provincial health department, indicating the Regulator now acts across sectors rather than in isolated cases.
Your rights
Your rights over the data this website processes
Anyone who has submitted information through this website's contact features has the right to request access to, correction of, or deletion of that information, and may object to further processing at any time by contacting support through the channel below.