Betting promo codes in Kenya: what they are, and the scams around them

What a code does at sign-up

A promo code is a short string of letters or numbers typed into a box at registration or at deposit. It tells the bookmaker's system which offer, campaign or referrer to link to the new account. The code holds no money itself; it only points to terms the operator has already set.

Codes do three jobs. They switch on an offer that is not applied by default, they show the operator which advert or partner brought a customer in, and they let an affiliate prove that a sign-up came through them so that they can be paid. Whatever sits behind the code still has to follow the rules set out in the guide to betting bonus types, terms and the law.

Do you need a code to receive a lawful offer?

The Gambling Control Act, 2025 never mentions promo codes. Section 74(3) lets an operator offer free bets and bonus bets in the ordinary course of business, and nothing in that subsection ties the offer to a string typed by the player.

What the law ties an offer to is the operator's own terms. Regulation 4(1) of the Gambling Control (Conduct of Gambling Operations) Regulations, 2026 requires a licensee to submit its terms and conditions to the Authority for approval. Regulation 22(3) keeps a bookmaker's terms readily accessible to the public while play lasts, and regulation 22(4) makes every piece of promotional material carry a clear statement that terms and conditions apply.

So the place to read an offer is the operator's published terms, not a code list on someone else's page. If those terms do ask for a code, it belongs to the terms and should be readable there, and the clauses worth checking are listed in the guide to registration bonus terms.

A code also changes nothing about who may hold an account. Section 72(5) of the Act makes a licensee refuse or cancel any registration built on false information, whichever code it was opened with. What follows for the balance is explained in the guide to cancelled bonuses and winnings.

Why affiliates share codes, and what advertising law says

An affiliate is a website, channel or person paid by an operator for the customers they send. A code is the simplest way to track that: the same string appears on every post, and each sign-up that uses it is credited to the affiliate. That is why one code can turn up on many pages at once, each presenting itself as the source.

Regulation 2 of the Gambling Control (Advertising) Regulations, 2026 defines an advertisement as any form of communication that promotes or is intended to promote participation in a gambling activity, whether by print, broadcast, outdoor, electronic or digital media. The definition makes no exception for affiliates, influencers or chat groups. Section 87(1) of the Act and regulation 5(1) forbid promoting a gambling advertisement without the Authority's approval, and section 87(4) sets a fine of up to twenty million shillings, imprisonment of up to twenty years, or both.

An approved advert must show the licence number, a responsible gambling message such as "play responsibly", the licensee's name, address and customer-care number, and the words "authorized and regulated by the Gambling Regulatory Authority", under regulation 8(c). Regulation 9 bars calls to action, testimonials, former winners and false or misleading messages. The guide on whether betting bonuses can be advertised in Kenya goes through each rule.

A post that pushes a code with an instruction to register at once, and shows none of those details, does not match either regulation. This site carries no codes and takes no commission, for the reasons given on the page about how this site makes money.

How fake code sites harvest data

Some pages that promise codes are not affiliates at all. They exist to collect phone numbers, ID details, mobile money PINs or one-time passwords, or to steer visitors to an unlicensed site. The table sets what such a page asks for against what the law actually requires.

Regulation 102(1)(e) of the Conduct Regulations makes it an offence to assist another person in conducting illegal gambling through electronic or digital means. A code page that funnels players to an unlicensed site may fall within that wording, though whether a given page does is for the Authority and the courts.

How to check a site before you type anything

1. Find the operator's domain in the regulator's list on gra.go.ke, headed "Licensed Gaming Companies for the Trading Period 2025/26", and read the DOMAINS column. Type the address yourself instead of following the code page's link.
2. Look for the licence on the operator's own platform; under section 36(3) of the Act, every holder of an online gambling licence must show it there.
3. Read the offer in the operator's own terms, including the line that terms and conditions apply.
4. Keep your mobile money PIN and any one-time password to yourself, on every page and in every chat.
5. Treat any request to pay for a code as the end of the conversation.

If you already gave your details

Deal with the payment side first. Change your mobile money PIN and contact your provider through its official customer care.

Section 26 of the Data Protection Act, 2019 gives you the right to be informed how your personal data will be used, to access it, to object to its processing and to have false or misleading data corrected or deleted. Section 56 lets you complain to the Data Commissioner orally or in writing, and section 56(5) requires the complaint to be investigated and concluded within ninety days.

If the code page sent you to a gambling site that is not on the regulator's list, the Gambling Regulatory Authority receives complaints from the public under section 10(m) of the Act. A toll-free line, 0800-723-770, is shown on the regulator's website.

Outside the scope of this guide

No codes appear here, no operator is named, nothing is ranked and no offer is judged worth taking. Betting is for adults only, persons under eighteen are kept out by regulation 92(1)(c) of the Conduct Regulations, and no code alters that.