Picklebet pays A$19,800 after accepting bets from a BetStop registrant

Australia's BetStop register is designed to let a person exclude themselves from every licensed online and telephone wagering provider in one step. ACMA found six providers failed to comply with the rules that make that promise real: Tabcorp, LightningBet, Betfocus, TempleBet, Picklebet and BetChamps.

Across the investigations, registered people were allowed to open accounts, access wagering services or receive marketing. ACMA says the underlying facts differed. It would be wrong to report that all six companies committed every listed act, but the common result was the same: self-excluded customers were not fully protected by the provider systems meant to recognise them.

Tabcorp paid $112,680 through six infringement notices and entered a court-enforceable undertaking. That undertaking requires an independent review of customer-verification processes and staff training on national-register duties. The figure belongs to Tabcorp's case; ACMA did not announce a combined $112,680 fine across all six providers.

This matters because the enforcement tools are not interchangeable. An infringement notice produces a payment. An enforceable undertaking imposes commitments that can be taken to Federal Court if breached. A remedial direction orders corrective work, while a formal warning records a lower-level outcome without the same obligations.

The published variation gives Tabcorp 50 business days after receiving the independent consultant's report to provide its board-approved implementation plan, replacing the original 20-day period. The other undertaking terms remain enforceable; the variation is not evidence that the remedial work has been completed.

Betfocus, LightningBet and TempleBet received remedial directions. Each must commission an independent audit of its systems and implement the recommendations that follow. ACMA says failure to comply with a direction is an offence and can lead to civil penalties.

The regulator also published the underlying investigation and direction records for individual providers. Those files turn a broad press release into auditable evidence. They allow readers to check which company received which measure instead of treating six separate cases as one undifferentiated scandal.

BetChamps received a formal warning. Picklebet was the provider whose enforcement action remained under finalisation in the 29 January announcement. On 22 October, ACMA published the missing outcome: Puntaa Pty Ltd, trading as Picklebet, had paid an A$19,800 penalty.

The new finding concerns a later event than the 2024 conduct summarised in January. ACMA found that, on 9 February 2026, Picklebet accepted bets from a customer who had registered with BetStop hours earlier. The investigation report records one contravention of the prohibition on providing wagering services to a registered individual.

The same report is narrower than a general systems condemnation. ACMA found no contravention of the marketing-recklessness provision it examined and no breach of the account-closure provision. Picklebet closed the account later that day. Those express no-breach findings belong beside the penalty because they prevent the single service contravention from being expanded into claims the regulator rejected.

A national register works only when the exclusion record matches every route into a provider: registration, login, account recovery, merged customer records, marketing lists and telephone betting. ACMA concluded the providers had not ensured that underlying systems and processes operated as intended. That is more specific than saying staff simply made isolated mistakes.

The practical test is whether independent audits find and repair the joins between those systems. Picklebet's published outcome removes the procedural gap left in January, but it does not prove that every separate audit or implementation obligation imposed on the other providers has been completed.

For readers, the distinction between an account being opened, accessed or marketed to is operationally important. Each points to a different control that may have failed, from onboarding and identity matching to authentication or suppression lists. Publishing provider-level records lets compliance teams test the relevant control instead of responding to a vague sector-wide warning. It also gives self-excluded customers a clearer standard against which to judge whether the national protection is functioning. The regulator's mix of sanctions makes a further point: remediation is being tailored to the evidence in each investigation, not assigned from a single penalty table.