A major reckoning is looming for Kenya’s betting industry as Odibets, a fast-rising platform linked to Andrew Aligula, finds itself at the center of a high-stakes data privacy case that could redefine how companies handle personal information. The High Court is expected to deliver its ruling on May 13, in a matter that has already triggered widespread concern over the safety of millions of Kenyans’ data.
The case is anchored on claims contained in court filings and forensic investigations that point to a possible flow of sensitive subscriber data from insiders within Safaricom to entities within the betting sector. Among the companies named in investigative materials is Odibets, alongside other betting platforms that are said to have received or interacted with datasets originating from telecom systems.
What has alarmed investigators and observers is not just the existence of the alleged data, but its scale and structure. According to forensic records cited in the proceedings, the data was not handled in a single transfer. Instead, it was reportedly distributed over an extended period, broken down into smaller, commercially viable segments and shared in batches. Subsets of 50,000, 100,000, and even 200,000 records were allegedly packaged and circulated, with samples provided to prospective buyers before full datasets were transferred.
The information itself is described as highly sensitive. It allegedly includes full names, identification numbers, mobile subscriber details, M-Pesa transaction histories, betting patterns, device identifiers, and even geolocation data down to county and locality level. In one instance referenced in the investigative material, a dataset covering over 11 million gambling-related subscribers was reportedly transferred within hours, pointing to the depth of access and the speed at which such information could move.
Witness statements presented as part of the case further paint a troubling picture. Individuals linked to the alleged scheme describe internal processes through which data was accessed and compiled before being shared externally. In one account, a Safaricom employee is said to have been instructed to assemble comprehensive datasets for a betting company, with the information then distributed through cloud-based platforms after internal communication.
If proven, the implications are far-reaching. Experts warn that access to such detailed consumer data allows companies to move beyond traditional marketing into precision targeting. It enables identification of high-value users, tracking of financial behavior, and tailoring of engagement strategies in ways that raise serious ethical and legal concerns. In a betting market driven by user acquisition and retention, such intelligence could provide a powerful competitive edge.
The timing of Odibets’ growth has also drawn attention. Established in 2018, the platform quickly gained traction in Kenya’s crowded betting landscape. Investigators are now examining whether there is any link between its rapid expansion and the alleged availability of such datasets during the same period. While no definitive conclusions have been reached, the overlap has intensified scrutiny.
The case also brings into focus Kenya’s broader struggle with data protection and enforcement. Despite the existence of the Data Protection Act, critics argue that gaps in oversight and enforcement have allowed companies to operate in grey areas. The role of the Office of the Data Protection Commissioner is now under renewed scrutiny, with calls for stronger action to safeguard consumer information in an increasingly digital economy.
This is not the first time Kenya has faced questions over data privacy. In recent years, controversies have emerged around voter data handling, mobile lending platforms, and digital financial services, where users have complained of unauthorized access, aggressive targeting, and misuse of personal information. Each of these cases has added to a growing sense that personal data in Kenya is often more exposed than protected.
The betting industry, in particular, has been under pressure due to its reliance on mobile platforms and financial transactions. With millions of users engaging daily, companies in this space handle vast amounts of personal and financial data, making them both powerful and vulnerable in equal measure. Any breach or misuse has the potential to affect not just individual users, but the integrity of the entire ecosystem.
As the May 13 ruling approaches, the stakes could not be higher. A finding against Odibets or any of the entities mentioned in the case could trigger regulatory action, financial penalties, and a wave of reforms across the industry. It could also set a legal precedent on how data-related cases are handled in Kenya going forward.
For now, Odibets has not issued a detailed public response addressing the specific forensic claims raised in the case. The silence has only intensified public interest, with many Kenyans waiting to see whether the court will confirm the allegations or clear the air around one of the country’s most visible betting platforms.
Beyond the courtroom, the issue resonates on a deeper level. It touches on trust between companies and consumers, on the security of personal information, and on the responsibility of institutions tasked with protecting citizens in the digital age. For millions of Kenyans who share their data daily in exchange for services, the outcome of this case will carry lasting consequences.
As the country waits for the verdict, one thing is becoming clear. This is not just a case about one company.
It is a test of Kenya’s entire data protection framework.
And the result could reshape the future of digital business in the country.
