Sportsbook sign-up asks 12 fields; deleting the account takes 1

A mid-tier European sportsbook I signed up for last month asked for twelve separate pieces of information before it would take a €10 bet: full legal name, date of birth, residential address, email, mobile number, nationality, a chosen username, a password, currency, preferred odds format, source of funds, and a promo code it wouldn't let me skip. Deleting that same account took one click in a settings menu, one confirmation dialog, and about four seconds. The asymmetry isn't a quirk of that operator. It's the standard shape of the modern sign-up funnel, and it tells you something about how the industry thinks about your data.

The twelve-field form is not an accident of bad design. Each field maps to a compliance obligation or a marketing asset, and the operator has a financial reason to collect every one of them at the earliest possible moment. The one-click deletion is also not an accident, but its logic runs the other way: churn is expensive to fight and cheap to process, and a clean exit keeps the regulator off your back.

What the twelve fields are actually for

Strip away the interface and the fields split into three buckets.

Legal identity. Name, date of birth, address, and nationality exist because of know-your-customer rules. Under the EU's fourth and fifth anti-money-laundering directives, operators must verify identity before a customer can withdraw, and most now verify at deposit or even at registration. The UK Gambling Commission tightened this further: since October 2019, operators must verify age and identity before a customer can gamble at all, not just before a payout. That's why the form is front-loaded.

Account mechanics. Username, password, currency, and odds format are pure product decisions. Currency and odds format are prefilled from your IP address in most cases, so they cost you two clicks rather than two minutes. Username and password are the only fields a returning customer never has to re-enter, which is worth remembering when you're deciding how much of your real information to hand over.

Commercial signals. Source of funds, mobile number, and the promo code are the interesting ones. Source of funds is a genuine AML requirement above certain deposit thresholds — typically triggered at €2,000 in a rolling 12-month period in many EU jurisdictions, though the exact figure varies by regulator. But asking for it at sign-up, before you've deposited anything, is a choice. The mobile number is a marketing channel disguised as a security feature. The promo code field exists so the operator can attribute you to whichever affiliate or campaign brought you in.

None of this is sinister on its own. The problem is the compounding: each field adds friction the operator accepts because the conversion cost is lower than the compliance and marketing value. Twelve fields is roughly the point where the trade-off stops favouring the customer.

The deletion side is deliberately easier

Here's the part that should bother you more. Under the GDPR, you have a right to erasure, and operators know it. A one-click delete button is not generosity — it's the cheapest way to comply with Article 17 without fielding support tickets. Building a friction-heavy deletion flow would invite complaints to a data protection authority, and those complaints are public and expensive.

So why does deletion feel so much easier than it should? Because the operator has already extracted what it needed. Your identity is verified, your marketing consent (or lack of it) is recorded, and your deposit history is retained under a separate legal basis — usually AML record-keeping, which in most EU states means five years after the account closes. The delete button removes your login, not your data. Read the confirmation email closely and you'll usually find a sentence like "we retain certain records as required by law," which is true and also covers more than you'd expect.

There's a second reason deletion is frictionless: it's a churn signal the operator wants to capture cleanly. A customer who deletes is a customer who won't complain, won't dispute a charge, and won't generate a regulatory query. Making that exit hard has no upside.

Where the friction actually belongs

The 12-to-1 ratio isn't the real issue. The real issue is that the friction is on the wrong side of the relationship.

Sign-up friction protects the operator. It verifies you, attributes you, and captures your marketing consent before you've had a chance to think about it. Deletion friction would protect you — it would give you a moment to reconsider, to download your transaction history, to check whether you've left a balance behind. Instead, deletion is the one place the industry has optimised for speed.

A better design would invert this. Ask for identity at the point of withdrawal, which is what the rules actually require in most jurisdictions, and let people deposit and bet with a username and email. Put the friction on the deletion side: a 24-hour cooling-off period, a prompt to export your history, a clear statement of what's retained and for how long. Some operators do parts of this. The UK's GamStop self-exclusion scheme, for instance, requires operators to block a customer across all licensed sites for a minimum of six months, which is a form of enforced friction that works. But the base sign-up experience hasn't moved.

Responsible gambling tools are the other place to look. Deposit limits, reality checks, and time-outs exist and are usually easy to set — easier, in fact, than the initial sign-up. That's the right direction, but it's telling that the industry has made it simpler to limit your own play than to register for it.

The open question

The twelve-field sign-up persists because regulators demand identity verification earlier and earlier, and because marketing teams value the mobile number more than they fear the drop-off. Both pressures are real. But the one-click delete suggests operators have already solved the hard technical problem of making data removal easy — they just haven't applied the same thinking to the front door.

So the question worth asking isn't why sign-up takes twelve fields. It's why, if deletion can be that simple, the industry hasn't used the same engineering to make the first deposit simpler too. The answer, most likely, is that it doesn't want to.