Another useful aspect of the likes of Moneybookers and Neteller is their incorporation in the UK, putting then under the control of the FSA and answerable to all aspects of UK law, including the 1998 Data Protection Act. They have access to a considerable amount of sensitive customer data – credit cards, bank accounts and all manner of identity verification documentation – so the tight legal framework they are bound by is important for customer peace of mind.

But how secure is the data?

Just over a year ago I started having doubts, when a Moneybookers customer reported that his account had been closed on the basis of information received from a casino client, but without ever being notified by Moneybookers as to exactly what the information was – I reported on this my Moneybookers: potential breach of UK law article.

If you look at the “rights of data subjects” section of the Data Protection Act, this bit jumps out:

7 Right of access to personal data

(1) Subject to the following provisions of this section and to sections 8 and 9, an individual is entitled -

(a) to be informed by any data controller whether personal data of which that individual is the data subject are being processed by or on behalf of that data controller,

(b) if that is the case, to be given by the data controller a description of -

(i) the personal data of which that individual is the data subject,

(ii) the purposes for which they are being or are to be processed, and

(iii) the recipients or classes of recipients to whom they are or may be disclosed,

(c) to have communicated to him in an intelligible form -

(i) the information constituting any personal data of which that individual is the data subject, and

(ii) any information available to the data controller as to the source of those data

It seemed to me that these clauses had been breached, as the data had not been disclosed to the “data subject” – customer – in question.

More recently, another possible breach came to my attention: the customer of one Cherry Red Casino had winnings confiscated on the basis of information apparently received from Moneybookers. I requested and reviewed his email correspondence with the casino in question, and posted extracts in my Cherry Red Casino and Moneybookers article. Most worrying was this revelation:

We have worked closely with third parties to ascertain which players are genuine and which are fraudulent and yours has come back as being connected to other players in Europe and as having transferred funds between Moneybookers accounts.

We are certain that the information we had received from Moneybookers and third parties constitute to the answers we have given players.

So, confidential information of some kind or another was evidently disclosed, by the payment solution to the gambling operation, with no notification to the player.

Another player reported publically, on another similar case, in the Gambling Industry Association Rushmore Casino discussion. Here, an affiliate representative gave a little more detail about the nature of the information:

Moneybookers…only confirmed with us which Moneybookers email addresses were linked and had transferred funds between themselves, it was a yes or no answer and included no further private or confidential banking information or otherwise. Moneybookers…confirmed that these accounts were in fact connected and…transferred funds between their accounts also.

There are a few problems here.

In the first place, confidential information is supposed to be genuinely confidential, and informing a third party of aspects of a customer’s account and the people to whom they make transfers is not an aspect of “confidentiality” that I am aware of. The customer in question was at no point notified by Moneybookers of the disclosure, in whatever format, of his account details to third parties.

I am not a lawyer, but this does not look right to me, insofar as it appears to contravene the section of the DPA that I quoted above.

In the second place, and marginally off the question of confidentiality but highly relevant to customers of these payment solution providers and the industry as a whole, is that this information may be leading to bogus conclusions – the fact that Customer A transfers funds to customers B and C does not necessarily make Customer A guilty of an illegal act. Whether or not the customer is guilty, the correlation between the guilt and the account activity in question is by no means absolute.

Here is a possible scenario:

Casino: “We believe these two players are connected (and therefore guilty of activities we do not allow); can you confirm this?”

Moneybookers: “Yes; the two accounts in question have transferred and received funds”.

On this basis, to summarise my above points:

1) This disclosure to a third party of a customer’s account activity may be leading to entirely erroneous conclusions.

2) More importantly: at no point was the customer – or rather, customers – informed of these behind-the-scenes information exchanges. This appears to me, in line with simple reasonable behaviour, unacceptable, as one ends up being convicted with no right of defence. But more importantly, the nature of the disclosure in question does not appear to me to adhere to the laws I quoted above.

I have, myself, carried out a few “person to person” transfers with Neteller, the payment solution I use. I would hope that Neteller never disclose this aspect of my account, or any other, to third parties.

Whether or not Moneybookers discloses aspects of my account to third parties is irrelevant to me. I no longer use their services.

I will be forwarding this article to Moneybookers for their comments.

—

John David Lefebvre, Neteller co-founder, was arrested and charged with transferring billions from U.S. citizens to overseas gambling companies.

Photo Credit: Artist’s Rendering By Shepard Via Bloomberg News Photo

—

Wash Post:

Neteller, which had provided payment services to more than 80 percent of worldwide gaming merchants, watched its business swell after PayPal and parent company eBay agreed to leave the business and forfeit $10 million to settle civil charges three years ago over financial transfers to offshore and online gambling firms.

Now, however, with the arrest of two of its founders, the British Web site is scrambling to exit the U.S business. Neteller is besieged with requests from frustrated bettors who want to recoup billions in deposits and winnings. The money is being held in trust accounts while the company holds conversations with the Justice Department about the status of its executives and other board members.

“The answer is, it’s a bit confused at the moment,” Neteller spokesman George Cazenove said. “I’m sure they will get their money back. You’ve got to give Neteller a bit of space.“

SportBooks Review – 02.01.2007 – (07:45 PM CST)

Neteller cuts off remaining withdrawal options for U.S. citizens. Six days after the Neteller debit card service was discontinued, U.S. users find they are unable to transfer to peers in other countries. Non-U.S. users currently have the ability to move funds normally. Neteller’s FAQ page was updated today.

Why can’t I perform Peer-to-Peer transfers anymore?
In order to ensure that US members do not use NETELLER with the intent to gamble online, NETELLER is no longer offering its Peer-to-Peer service in the US.

Although Neteller assures players that funds are safe and will be paid after an undisclosed period of time, large balance holders are aggressively pursuing the use of non-US bank accounts to withdraw funds.

Abacus:

Posted Fri January 26 2007 10:49 AM

I requested 3 checks from 3 different offshore gaming entities within a two hour span on Wednesday. I paid the $30 fee for TS to ship it via FedEx and received it at 9 AM this morning. I also opted for airmail with the other firms. The other firms said they had large backlogs due to large numbers of customers requesting funds. TS never said if they were experiencing larger than normal payout requests but judging by remarks in the forum and elsewhere on the net one could reasonably assume they were.

I think they did a hell of a job processing my withdrawl in such a speedy manner. I was only adjusting my balance and did not request all my funds.

This message has been edited [i.e., censored]. Last edited [i.e., censored] by: Trade Exchange Network, Mon January 29 2007 06:10 AM

The American authorities have swooped on the founding shareholders of NETeller, the company which specialises in money transfers between online gambling sites and players.

Stephen Lawrence and John Lefebvre, both former directors of the firm, were detained in the US yesterday, while travelling separately.

It’s probably not a good idea for TEN CEO to go to the crappy, phone-booth prediction market conference, in the U.S.

It’s probably not a good time for U.S.-based service providers (including conference organizers) to have any relationship with TradeSports.

All this is unfortunate, of course.