Safaricom’s 11.5 Million Punters File: How Odibets And Other Betting Companies Bought A Map To Kenya’s Weakest Men

In Part Four of this series, we stepped away briefly from the data trail and followed the money into Muthaiga, where Pax Manor enters the Odibets story as the luxury face of a betting economy that began with ordinary Kenyans staking small amounts on their phones and ended with elite property, diplomatic neighbourhood branding, staff complaints and the quiet confidence that usually comes when gambling wealth starts dressing itself as respectable business.

Part Five returns to the documents because every serious corporate scandal eventually leaves the polished mansion and walks back into company records, licences, regulators, directors, shareholders, bank accounts, compliance files, customer acquisition systems and the official paperwork that powerful people rely on when they want to look clean in public.

Odibets is not just a colourful betting brand. Behind the name sits Kareco Holdings Limited, the company associated with the Odibets platform and now placed inside a wider scandal involving alleged Safaricom subscriber data, the 11.5 million punters profile, and the questions raised before investigative and regulatory agencies over whether Odibets, Kwikbets and other betting companies benefited from unlawfully obtained customer information. The public sees odds, jackpots, bonuses and adverts, but investigators are now being pushed towards the architecture behind the platform, because the real story of any betting empire is never only on the front page of the app. It sits in the company structure, licensing history, directors, beneficial owners, payment systems, data sources, marketing agencies and regulatory files.

This is where Kenya’s gambling industry has always enjoyed dangerous comfort. Betting companies have been allowed to sell hope aggressively to a wounded population while hiding the most important parts of their operations behind corporate language, licensing paperwork and public relations. They present themselves as entertainment businesses, yet their business model depends on repeated deposits, constant targeting, fast customer acquisition and the ability to keep punters returning even after losses. Once the Safaricom data scandal entered the picture, the question stopped being whether the companies had licences and became whether the customer databases that powered their growth were acquired lawfully.

The complaint placed before the Directorate of Criminal Investigations and the Gambling Regulatory Authority of Kenya alleges that former Safaricom employees accessed and sold customer data between June 2018 and May 2019, including names, identification details, M-Pesa transaction histories, geolocation information, device identifiers, betting patterns, gambling frequency, amounts wagered and preferred betting platforms. It also places Odibets, Kwikbets and other betting companies within the wider trail requiring scrutiny over the alleged receipt, use or commercial benefit from unlawfully obtained Safaricom subscriber information.

That is where the regulator’s failure begins to look too large to ignore.

A gambling licence should not be treated as a decorative certificate hanging on a wall while the real business happens in databases, third-party marketing arrangements and customer profiling systems that nobody audits properly. A licence should mean that the regulator understands who owns the company, who funds it, who controls it, how it acquires customers, how it stores data, how it targets users, how it protects vulnerable gamblers and how it proves that every customer database used in marketing was lawfully obtained. Anything less turns licensing into theatre.

Odibets grew inside a market where the regulator was always chasing the industry from behind. Betting companies were moving faster than oversight. Apps were spreading faster than policy. SMS promotions were reaching punters faster than consumer protection. Young men were losing money faster than public officials could understand the psychology of digital gambling. By the time government started pretending to tighten the sector, the major players had already built brands, databases, political networks, supplier chains, payment systems and public visibility.

That is how corporate comfort is created. First the company grows quickly, then the regulator starts treating its size as legitimacy, then the public becomes used to seeing the brand everywhere, then politicians start appearing near the money, then the company becomes too visible to question without triggering lawyers, lobbying and quiet phone calls from people who benefit from the ecosystem.

Kareco Holdings now sits inside that exact problem.

The question is no longer merely whether Odibets was licensed to operate. The question is whether the licensing authorities ever properly interrogated the company’s data foundations, customer acquisition history, marketing suppliers, third-party data vendors, associated intermediaries and the beneficial actors behind its rapid rise. A betting company can have a licence and still have serious questions to answer about how it built the database that made the licence profitable.

That distinction matters because the real value in betting is not the licence alone. The real value is the customer. The real value is knowing who bets, how often he bets, how much he can lose, where he is located, when he deposits, which games attract him and how he responds after losing. A licence merely opens the door. Data determines how much money comes through that door.

This is why the alleged Safaricom punters file is so dangerous. It allegedly gave access not just to ordinary subscribers, but to behavioural information around gamblers. In a clean market, a betting company earns that knowledge slowly from customers who willingly sign up, deposit, bet and interact with the platform. In a dirty market, a company buys a shortcut from people who already know where the gamblers are. That is the difference between competition and predation.

The records around Odibets, Kareco Holdings, Kwikbets and other betting companies must therefore be read as a corporate maze, not as isolated brand names. The maze includes the licensing documents, company ownership records, beneficial ownership disclosures, tax filings, supplier contracts, payment processors, marketing agencies, data vendors, communication logs, bank accounts, M-Pesa records, internal campaign records and any third-party agreements entered during the period when the Safaricom data was allegedly moving.

This is where Kenya’s regulators have repeatedly failed the public. They look at companies as paperwork instead of systems. A company files documents and gets a licence. A company pays fees and continues operating. A company advertises responsibly in public while its real acquisition machinery remains hidden. A company claims it follows the law, yet nobody opens the servers, nobody audits the marketing databases, nobody traces the data vendors, nobody examines whether the people being targeted consented to the use of their information.

That weakness created room for the betting industry to grow aggressively inside the private lives of Kenyans.

The Gambling Regulatory Authority cannot examine this scandal only as a licensing matter. It must be understood as a data-driven customer acquisition scandal, where the central question is how betting operators obtained the lists, numbers, profiles and behavioural intelligence used to reach punters. The Data Commissioner cannot treat it only as a Safaricom breach, because the downstream commercial use of stolen information is where the real harm matures. Law enforcement cannot stop at former telco employees, because the value of stolen data is completed only when a buyer turns it into business advantage.

The Odibets files show why Kenya must begin treating data as the new currency of corruption. In the old economy, cartels fought for tenders, land, procurement and public contracts. In the new economy, the most valuable thing is the private behaviour of citizens. A company that knows where people are weak can build wealth faster than a company that merely advertises. A betting company that knows who is already gambling enters the market with an advantage that cannot be seen on billboards.

That is why the corporate structures matter.

The public must know who really controls Odibets, who benefits from Kareco Holdings, who handled customer acquisition, which agencies were contracted, which consultants appeared during the period under review, which accounts paid for marketing data, which persons linked to Safaricom insiders communicated with betting interests, and which internal officials approved the use of external lists. This is not about curiosity. It is about establishing whether the betting empire was built only through lawful competition or whether stolen telco intelligence helped build the machine.

Corporate scandals in Kenya usually survive because they are made boring. The moment the issue enters company law, regulatory language, beneficial ownership, compliance files and licensing procedure, the public begins to lose interest. That is the point at which the powerful people relax because they know ordinary Kenyans are more likely to understand a stolen phone than a stolen database, more likely to understand a fake tender than a customer acquisition file, and more likely to understand a brown envelope than a data vendor contract.

This series will not allow the scandal to hide inside boring language.

Kareco Holdings must be understood as the corporate vehicle behind the Odibets brand. Odibets must be understood as one of the betting platforms whose rise is now being examined against the background of the alleged Safaricom data breach. The regulator must be understood as the public body that was supposed to ensure that betting operators did not build market power through unlawful customer profiling. The Data Commissioner must be understood as the office that must follow personal information beyond the moment of theft and into the commercial systems where it was allegedly exploited.

The public also needs to understand how customer databases become corporate assets. A betting platform with a huge database can raise money, attract partners, negotiate suppliers, expand into new markets, run campaigns, sell confidence to investors and appear stronger than competitors. The database becomes part of the company’s value even when the public never sees it. If any portion of that database was built from unlawfully obtained Safaricom information, then the problem is not just privacy. It becomes corporate enrichment from stolen personal data.

That is where asset recovery enters the conversation.

If stolen customer data helped create market share, revenue, brand value and business expansion, then the financial benefit cannot be measured only by the price allegedly paid for the data. It must be measured by the profits generated from customers targeted through that data, the valuation built from those customers, the properties bought from the resulting wealth and the corporate power accumulated during the period when regulators were asleep. A stolen database can become a betting platform’s invisible engine, and once that engine produces money, the proceeds move into property, influence and respectability.

This is why Pax Manor, discussed in Part Four, was not a distraction. It was a lifestyle footprint. The corporate records now complete that picture by showing that gambling wealth must be followed from the punter’s phone into the company structure, from the company structure into the bank accounts, from the bank accounts into assets and from the assets into the social power that makes owners appear untouchable.

The public must also look at the role of political protection in the betting industry. No sector that handles billions, targets millions of citizens and operates through heavily regulated licences grows without building relationships with power. Betting companies need regulatory comfort, tax comfort, advertising room, payment channels, legal protection and political silence. Once such companies become rich enough, they stop behaving like ordinary licensees and start behaving like institutions that can negotiate with the state.

That is dangerous because a regulator that fears the companies it supervises has already failed.

The Odibets and Kareco Holdings trail now exposes the central weakness in Kenya’s regulatory culture. Public agencies wait until damage has already occurred, then issue letters, hold meetings, request explanations and create the impression of movement. But a serious regulatory system would have already audited customer acquisition methods in the betting sector, forced operators to disclose data sources, examined third-party marketing arrangements, punished unlawful targeting and protected vulnerable gamblers from being hunted through stolen intelligence.

The scandal also exposes Safaricom’s unfinished responsibility. Safaricom cannot only present itself as a victim of rogue employees while millions of customers are left wondering where their data went and who used it. If the company’s systems allowed such sensitive customer information to be extracted, then Safaricom’s duty does not end at cooperating with investigators. It must also help establish which companies received the data, which customers were exposed, what information was compromised and how the victims will be protected from continuing commercial exploitation.

The public has been told for years to trust digital systems. Register your SIM card. Use M-Pesa. Link your identity. Pay through the phone. Bet through the phone. Borrow through the phone. Save through the phone. Live through the phone. Yet when the private information inside those systems allegedly walks into the betting industry, the same public is expected to remain calm while companies hide behind procedure.

That calm is exactly what the powerful rely on.

Part Five therefore places the corporate maze at the centre of the scandal. Odibets is not just a brand. Kareco Holdings is not just a company name. Kwikbets and other betting companies are not just side characters. The regulator is not just a licensing office. Safaricom is not just the breached telco. Together, they form the architecture of a scandal where data, gambling, money, licensing and public silence meet.

This series will now move deeper into the corporate records, licence history, ownership questions, customer acquisition machinery, data sources and regulatory blind spots that allowed Kenya’s betting industry to grow while the private behaviour of millions of citizens allegedly became a commercial asset.

In Part Six, we will examine the 11.5 million punters themselves, the human beings behind the file, the men who were not just gambling but being studied, and how Kenya’s economic pain became the raw material for one of the most aggressive betting economies in Africa.

In Part Three of this series, we followed the money trail and examined how Safaricom’s 11.5 million punters file allegedly moved from private customer data into commercial value, where the scandal shifted from simple access to data into the far more serious question of who monetised that data, who benefited from it, and how private gambling behaviour became useful to companies operating in Kenya’s betting economy.

The next chapter moves from the money trail into property, prestige and the visible architecture of wealth.

Money of that nature does not remain idle for long. Once serious gambling wealth has been squeezed from millions of punters, it starts looking for respectability in lawyers, political networks, luxury properties, polished gates, expensive furniture, private comfort and addresses that allow the owner to present himself as a respectable businessman instead of a beneficiary of an industry built on desperation.

That is where Pax Manor enters the Odibets story.

For years, Odibets was sold to the public as a betting platform, a colourful brand and a place where a broke Kenyan could turn small coins into hope. The public face was football, odds, jackpots, bonuses and the usual language of gambling companies pretending to be entertainment firms while feeding on a country where young men are economically wounded. Behind every betting slip, however, there is money, and behind serious money there is always a destination.

In the Odibets trail, that destination now points towards Muthaiga.

Pax Manor Muthaiga was officially launched in early 2025 and is described as a luxury hospitality property built within a meticulously restored 1958 mansion, transformed to anchor high-end hospitality in Nairobi’s diplomatic district. That description alone places the property in a completely different category from ordinary hospitality investments. This is elite positioning, old mansion aesthetics, diplomatic neighbourhood branding, quiet luxury and a business designed to speak to people whose comfort is built around privacy, security and exclusivity.

The location tells its own story because Muthaiga is not a random Nairobi estate where anyone wakes up and casually builds anything. It is one of the most sensitive, wealthy and watched neighbourhoods in the country, sitting close to embassies, diplomatic residences, international agencies, old political networks, security interests and people whose movements rarely appear in ordinary gossip. A luxury hospitality facility in such a zone is therefore not just a hotel. It is a statement of arrival.

Pax Manor, according to information reaching this publication, is linked to Andrew Aligula, the man repeatedly associated by insiders with the Odibets empire. The property is said to be part of the wider business interests around the betting money that grew during Kenya’s gambling gold rush. In the public imagination, betting money disappears into apps, bonuses, promotions and football banter, but in the real world such money moves into assets, property, hospitality, networks and the quiet architecture of influence.

This is why Pax Manor belongs inside the Odibets files.

The hotel appears here as a visible symbol of where the betting economy lands after extracting money from millions of punters. On one side are ordinary Kenyans staking KSh 50, KSh 100, KSh 200 and KSh 500 while chasing rescue through odds and jackpots. On the other side is a restored 1958 mansion in Muthaiga, polished into a luxury hospitality facility in Nairobi’s diplomatic district. That contrast captures the real economy of betting, where small losses from millions of desperate people can quietly become elite property, private comfort and social power.

The documents already before investigative agencies raise the deeper data question around Odibets, Kwikbets and other betting companies, including how Safaricom subscriber information allegedly moved into the gambling economy, how the 11.5 million punters profile became valuable, and how customer behaviour may have been turned into commercial advantage. That is the foundation of the scandal. Pax Manor now becomes the lifestyle chapter, the visible monument that shows what betting wealth becomes after the money has been made.

Luxury businesses love clean language. They call themselves boutique properties, hospitality experiences, heritage restorations, diplomatic district retreats and premium destinations. They speak about architecture, ambience, privacy, comfort and service because they know how to polish the outside until the public forgets to examine the source of the money, the treatment of workers, the approvals behind the location, the networks that made the project possible and the empire sitting behind the curtains.

Pax Manor sits inside that contradiction.

The property presents itself as luxury, but staff linked to the facility have reached out with complaints alleging harsh treatment and abuse inside the workplace. According to the staff who contacted this publication, the polished image of the property allegedly hides a difficult working environment, with claims that workers have been spoken to badly, humiliated and mistreated by management linked to the household around Aligula. The complaints specifically point to the role of Aligula’s wife in the management of the facility, with staff alleging that her conduct towards workers has been abusive and degrading.

This staff angle is not a side issue because luxury in Kenya often rests on the backs of silent workers. The public sees the mansion, the polished floor, the manicured lawn, the soft lighting and the carefully arranged dining table. It does not see the housekeeper shouted at in the corridor, the waiter humiliated behind the kitchen, the guard treated like furniture, the cleaner expected to remain invisible, the cook carrying the pressure of rich people’s moods or the junior staff member who cannot complain because the owner is feared, connected or too wealthy to be challenged.

That is the human underside of the property.

The same economy that sells hope to desperate punters can also sell elegance to guests while workers swallow humiliation behind closed doors. The structure is familiar because the ordinary person gives labour, loyalty, silence or money while the powerful person collects comfort, status and profit. Pax Manor therefore becomes more than a luxury address. It becomes part of the wider story of how betting wealth behaves once it enters elite spaces.

The story of Pax Manor also carries public interest because of its location. A luxury hospitality property in Muthaiga’s diplomatic district is not the same as a guest house in a random backstreet. It exists in a sensitive zone where planning approvals, security considerations, county permissions and national security concerns are not minor issues. Earlier concerns around Pax Manor have already raised questions about how a hospitality facility could operate near one of the most protected diplomatic areas in Nairobi and what approvals were granted by planning and security authorities.

Pax Manor is therefore not merely a hotel story. It is the point where the Odibets scandal touches property, labour, security, planning, diplomatic space and elite impunity. A betting empire allegedly built in the shadow of Safaricom data questions now has a luxury face in Muthaiga, and that luxury face brings with it fresh questions about staff treatment, approvals, security sensitivity and the movement of gambling wealth into high-end hospitality.

The contrast is too loud to ignore because the punter in Kayole, Githurai, Pipeline, Kisumu, Eldoret, Nakuru or Mombasa is trying to turn KSh 100 into rent while the betting company collects, the owners grow, the money moves, the mansion is restored, the luxury facility opens and workers inside the facility begin complaining. The public is then expected to admire the beauty of the property without examining the system that produced it.

That will not happen in this series.

The Odibets files are not only about the alleged theft of Safaricom customer data. They are also about the empire that rose in the same ecosystem, the way gambling money behaves after it leaves the betting slip, the business interests, properties, relationships and labour complaints that sit around the people behind the brand, and the movement from digital extraction to physical prestige.

Andrew Aligula’s name now sits at the intersection of these questions. On one side is Odibets, Kareco Holdings and the betting industry data scandal. On another side is Pax Manor, the luxury Muthaiga property linked to him and reportedly managed in part through his household. On another side are staff complaints. On another side are questions about how betting wealth enters spaces of diplomatic sensitivity and elite hospitality.

This is how scandals mature. They begin with a file, the file leads to messages, the messages lead to money, the money leads to property, the property leads to workers, and the workers expose a bigger world than the original file suggested.

Pax Manor is therefore not a distraction from the Odibets data scandal. It is part of the wider picture because serious money always leaves footprints. Some footprints are in bank records, some are in company filings, some are in M-Pesa trails, some are in WhatsApp chats, and some are in restored mansions with expensive gates, diplomatic neighbours and workers who know what happens behind the walls.

This publication invites Andrew Aligula, his wife, Pax Manor management, Odibets, Kareco Holdings and any person connected to the matters raised in this series to respond. Any response received will be published fairly. Current and former staff of Pax Manor with information, documents, contracts, payslips, messages, audio, videos, termination letters or any evidence relating to workplace treatment are also encouraged to reach out confidentially.

In Part Five, we will return from the mansion to the documents and examine the corporate structures, licences, ownership questions and regulatory blind spots around Odibets, Kareco Holdings, Kwikbets and other betting companies, because the story of the gambling gold rush cannot be understood only from the betting slip. It must be followed through data, money, property, power and the people left behind.

In Part Two of this series, we examined the WhatsApp market, the alleged movement of samples, the language of buyers and middlemen, and the disturbing ease with which Safaricom customer information appears to have been treated like a product inside a country where ordinary citizens trusted the telco with their identity, M-Pesa activity, location, betting behaviour and private financial habits.

But every serious scandal has a point where the talk must meet the money.

People do not move millions of customer records for jokes. Nobody risks employment, criminal exposure, court cases and corporate embarrassment because they enjoy forwarding spreadsheets. Data of that scale moves because someone has calculated its value, someone has identified buyers, someone has negotiated samples, someone has promised delivery, and somewhere along the way, money changes hands.

That is where Part Three begins.

The Safaricom data scandal must now be understood not only as a data breach, but as a possible commercial transaction involving private information belonging to millions of Kenyans. The records were allegedly not extracted for academic research, public interest or whistleblowing. They were allegedly extracted because betting companies and other commercial actors would find value in knowing who gambled, how often they gambled, how much they staked, where they lived, what devices they used, how their M-Pesa accounts behaved and which platforms they preferred.

That is why the money trail is the most important part of this scandal.

The complaint before investigative and regulatory agencies does not merely allege that Safaricom data was accessed unlawfully. It points to a wider commercial ecosystem where the data was allegedly sampled, discussed, offered, priced and delivered to people connected to betting interests. Once a stolen database enters such an ecosystem, the scandal becomes bigger than the rogue employee. It becomes a chain of benefit stretching from the person who extracted the data to the person who marketed it, the intermediary who negotiated it, the company that received it and the executives who may have gained from the customer acquisition advantage.

In ordinary theft, the stolen item is usually visible. A car disappears. A phone is snatched. Money leaves an account. A shop is broken into. But in digital theft, the stolen item can remain invisible to the victim while being extremely valuable to the buyer. A Safaricom customer could continue using his line, sending M-Pesa, receiving betting messages and placing wagers without ever knowing that his private behaviour may have been copied, packaged and sold somewhere.

That is why this matter is so dangerous. The victim does not even know when the robbery begins.

For betting companies, the value of the alleged 11.5 million punters file was not in the beauty of the data, but in what the data could produce. A company armed with such information would not need to waste millions shouting to the whole country. It could identify the already active gambler, the frequent loser, the repeat depositor, the football addict, the desperate salary earner, the young man chasing losses and the customer most likely to respond to inducements. That is why such data would have a direct commercial value, because every targeted message, bonus, call, promotion or campaign could be aimed at people already known to be vulnerable to betting.

This is where Odibets, Kwikbets and other betting companies enter the financial side of the scandal.

Their customer acquisition records, agency contracts, payment trails, M-Pesa movements, bank transactions, phone communication and internal marketing logs from the period under review now become the most important documents in the room. The question is no longer just how Safaricom customer data allegedly left the telco. The question is how that data was allegedly monetised inside the betting industry, who paid for access, which intermediaries received money, whether payments were disguised as marketing expenses, consultancy fees, data services, technical support, commissions or ordinary supplier invoices, and how the resulting customer intelligence was converted into betting revenue.

Corporate Kenya loves hiding ugly deals behind clean words.

A bribe becomes facilitation.

A kickback becomes consultancy.

A stolen list becomes marketing data.

A middleman becomes a business development agent.

A data broker becomes a strategic partner.

A dirty payment becomes an invoice.

That is why the records matter more than press statements. The money trail will not be found in polished corporate language. It will be found in payment descriptions, repeated transfers, suspicious supplier names, strange consultancy invoices, M-Pesa movements, personal accounts, linked companies, agents who appear suddenly and disappear after delivery, and bank records that show whether people connected to Safaricom insiders, data brokers or betting companies were moving money during the same period the data was allegedly being sold.

Kenya has seen this movie many times.

In the old tender scandals, companies would be created quickly, awarded contracts, paid heavily and then vanish. In the new data economy, the same trick can be done without supplying anything physical. A company can be paid for “marketing leads” or “customer acquisition support” while the real product being delivered is stolen behavioural intelligence from a telco database. This is why the Odibets trail must not only be examined through the lens of gambling regulation, but through the lens of financial benefit, data laundering and possible proceeds of crime.

Data laundering is a very simple concept when stripped of legal language. Dirty data enters a business through unofficial channels, then the company cleans it by using it inside campaigns, databases, customer targeting and revenue generation. By the time the public sees the final result, it looks like normal business growth. More users. More deposits. More betting slips. More withdrawals. More brand visibility. More market share. But behind the growth may sit information that customers never agreed to surrender.

That is the real scandal.

The betting companies did not need to publicly announce that they had a list. They only needed to use it.

If a company receives a file showing active punters, preferred platforms, betting frequency and M-Pesa behaviour, the company can silently fold that information into its own customer acquisition machine. It can send messages. It can target locations. It can design offers. It can call users. It can identify profitable segments. It can build campaigns that appear normal from the outside but are powered by private information stolen from another company’s systems.

This is why the money trail and the customer trail must be read together. A payment to a middleman may look innocent until it is placed next to a data sample, a WhatsApp message, a customer list, a marketing campaign and a spike in user acquisition. A consultant may look harmless until his phone records place him between a Safaricom insider and a betting operator. A bank transfer may look ordinary until its timing matches the movement of files, samples or negotiations. A marketing invoice may look clean until the deliverable behind it turns out to be a stolen punters database.

The complaint has already opened this door by calling for scrutiny of phone records, bank records, M-Pesa records, company records, intermediaries and associated accounts covering the period of the alleged breach. That is the correct direction because this scandal cannot be solved by reading statements alone. It can only be understood by matching communication with money and matching money with commercial benefit.

The Odibets angle is especially important because the company became one of the most visible names in Kenya’s betting boom. The public saw a growing brand. The streets saw promotions. Punters saw odds. Football fans saw the noise. But behind every fast-growing betting company there must be a customer acquisition story, and in this scandal, the documents now force Kenyans to ask whether part of that customer acquisition story was built on unlawfully obtained Safaricom subscriber intelligence.

Kwikbets and other betting companies also belong inside this wider financial examination because the alleged market for Safaricom data was not about one brand alone. It was about an industry where customer knowledge could decide winners and losers. Betting is a numbers game before it is even a football game. The company that knows the punter better has an advantage before the match begins.

That is why the 11.5 million punters file, if used commercially, would have created an unfair and predatory advantage. It would have allowed operators to locate people already inside the gambling habit and approach them with precision. It would have reduced marketing waste. It would have increased conversion. It would have turned private financial behaviour into a business weapon. Such an advantage cannot be treated as ordinary competition because ordinary competition does not involve allegedly buying private data from insiders at the country’s largest telco.

This is also where the role of regulators becomes embarrassing.

A gambling regulator that only checks licences while ignoring customer acquisition methods is not regulating the industry. It is merely issuing permission slips. A Data Commissioner who does not follow how stolen customer information enters commercial platforms is not protecting citizens. A law enforcement system that charges employees but allows alleged corporate beneficiaries to remain comfortable is not investigating crime. It is managing optics.

The betting industry in Kenya has grown fat in a country where oversight has always arrived late. By the time regulators wake up, the adverts have already run, the punters have already lost money, the companies have already built market share, the owners have already bought property, and the victims have already moved on without ever knowing how they were targeted.

That is the genius of this kind of scandal. The harm is hidden inside normal life.

A man receives a betting message and thinks it is just another promotion. He deposits KSh 100 and thinks he is making a personal decision. He loses and returns because that is what addiction does. But behind that message may sit a history of data movement, payments, samples, customer profiling and commercial calculation that began long before he touched his phone.

That is why the money trail must expose not only who paid for the data, but who profited from the people identified by the data. The true value of the alleged Safaricom punters file was not the price paid to insiders or middlemen. The true value was the lifetime revenue that betting companies could extract from targeted gamblers after acquiring the knowledge of their habits.

That is where Kenya must understand the size of the scandal.

The payment for stolen data may have been small compared to the profits generated from it. A file may be bought once, but used for years. A customer may be targeted once, but lose repeatedly. A marketing campaign may be sent in minutes, but the addiction it feeds may last a lifetime. That is why the financial benefit cannot be measured only by the first transaction. It must be measured by the revenues built from the unlawful advantage.

This is the part corporate lawyers will not want simplified for the public.

They will want to reduce the matter to technicalities, jurisdiction, admissibility, procedure, old dates, regulatory language and polite denials. But the ordinary Kenyan understands theft when it is explained properly. If private Safaricom customer data was stolen, sold to betting interests, used to target punters and converted into revenue, then this was not just a breach. It was a business model built on stolen knowledge.

The money trail now becomes the spine of the entire scandal. It can show who moved from conversation to transaction, who moved from sample to payment, who moved from payment to delivery, and who moved from delivery to profit. It can also show why the small people were easier to pursue while the bigger corporate actors remained wrapped in silence.

Kenya cannot keep allowing corporate scandals to end at the lowest level of the chain. The employee who extracts data is important, but the company that allegedly benefits from the data is more important. The middleman who delivers a sample is important, but the executive who approves the commercial use of that information is more important. The M-Pesa transfer is important, but the betting revenue generated from the stolen profile is even more important.

This is why Part Three of this series follows the money.

Not because money is the only evidence, but because money usually tells the truth long after people have started lying. WhatsApp messages can be deleted, phones can disappear, laptops can be formatted, public statements can be written by lawyers, and regulators can pretend to be studying the matter. But bank records, M-Pesa trails, invoices, contracts, supplier payments and linked accounts have a way of exposing the real architecture of a scandal.

The Odibets files now move from data to money. The question is no longer only how Safaricom’s 11.5 million punters file allegedly left the telco. The question is how that file was priced, who paid for it, how the payments were disguised, how the information entered betting operations and how much commercial value was extracted from Kenyans whose private gambling habits were allegedly sold without consent.

In Part Four, we will examine the business empire around Odibets, the ownership questions, the shadow figures, the corporate structures, the wealth built during the betting boom and how the data scandal now follows the money from Safaricom’s servers into the world of gambling profits, private influence and elite property.

In the first part of this series, we looked at how the Safaricom data scandal allegedly began from inside the country’s biggest telco, where customer records, M-Pesa histories, betting patterns, device details, locations and other sensitive subscriber information allegedly walked out through insiders who understood that Kenya’s private digital life had become more valuable than land, tenders or even cash in a briefcase.

But the real scandal was never going to end with the people who allegedly accessed the data. A stolen database does not become dangerous because it exists somewhere in a laptop. It becomes dangerous when someone starts looking for buyers, when samples begin moving, when names of interested companies enter conversations, when payment language appears, and when people start discussing customer records like sacks of maize in a market.

That is where Part Two begins.

The complaint before investigative and regulatory agencies paints a picture of a data market that allegedly operated with frightening casualness. This was not the image many Kenyans have of hacking, where some mysterious genius sits in a dark room typing strange codes on a black screen. This was more ordinary, more Kenyan and therefore more disturbing. It allegedly involved insiders, WhatsApp messages, Google Drive links, samples, payment talk, middlemen and betting companies that understood the commercial value of knowing exactly who in Kenya was already gambling.

In the documents, Safaricom customer data is not treated like sacred private information belonging to millions of people. It is treated like a product. The complaint refers to forensic WhatsApp material said to contain discussions around samples, buyers, delivery, payment and specific betting-related customer information. The language attributed to these exchanges is the language of people who knew they were not dealing with ordinary contacts, but with information that could change the fortunes of companies fighting for gamblers in a crowded betting market.

This is the part Kenyans must understand properly. A betting company does not need just any list of phone numbers. It needs a list that has already done the hard work for it. It needs to know who bets, how often they bet, how much they stake, which platform they use, where they are located, what kind of phone they carry and how their M-Pesa life behaves around the betting habit. That is why the alleged Safaricom punters file was so valuable. It did not merely tell a company where people were. It allegedly told the company where the weakness was.

The complaint places the alleged breach between June 2018 and May 2019 and says up to 29.9 million Safaricom customer records were accessed, with the profile of about 11.5 million punters being of particular concern. These numbers are not just statistics. They represent a country whose private financial behaviour may have been exposed to commercial actors who did not ask for consent, did not receive permission and allegedly saw opportunity where ordinary Kenyans saw only their phones, M-Pesa messages and betting slips.

The WhatsApp trail cited in the complaint is therefore central because it allegedly shows the movement from theft to monetisation. It is one thing for insiders to access data unlawfully. It is another thing for that data to be packaged, sampled, discussed and pushed towards companies in a sector where customer targeting is everything. The alleged market was not selling entertainment. It was selling access to people who had already demonstrated gambling behaviour, and that is why Odibets, Kwikbets and other betting companies sit at the centre of the story.

By the time the betting industry was exploding in Kenya, every operator knew that the fight was no longer just about having a licence, a website and a few adverts. The fight was for the punter’s phone. Whoever entered that phone repeatedly would control the habit. Whoever could reach a gambler at the right moment would increase deposits. Whoever could identify frequent players would save millions in blind advertising. In such an environment, a stolen file containing betting histories and M-Pesa-linked behaviour would not be a simple marketing tool. It would be a cheat code.

That is why the alleged WhatsApp market must be treated as the real bridge between Safaricom and the betting companies. It is the bridge between private customer records and commercial exploitation. It is the place where data allegedly stopped being an internal breach and became a business opportunity. It is also the place where investigators can follow the trail from the people who had access to the people who wanted the information, received samples, negotiated value, moved money and turned customer secrets into gambling intelligence.

The complaint refers to Odibets, trading under Kareco Holdings Limited, as one of the companies whose records are now part of the wider questions around how unlawfully obtained subscriber information allegedly moved into the betting industry. It also raises questions around Kwikbets and other betting companies, placing them in the broader trail that connects Safaricom insiders, stolen data, customer profiling and the commercial race for Kenyan gamblers.

This is why the matter cannot be sanitised as a normal corporate data incident. The issue is not only that customer information allegedly left Safaricom. The issue is that the data allegedly moved towards an industry whose profits depend on identifying people likely to stake money again and again. There is a world of difference between a leak of random contacts and a leak of betting behaviour. One exposes privacy. The other exposes weakness.

A person’s betting history is not just a number on a spreadsheet. It is a confession of habit. It can show desperation, addiction, routine, financial stress and emotional timing. A man who bets every Friday after salary is not the same as a man who places one random bet during AFCON. A student who stakes small amounts daily is not the same as a rich man betting casually for fun. A boda rider who loses and returns within hours tells a betting company something powerful about his psychology. When such information is allegedly extracted from telco systems and pushed into the betting economy, the scandal becomes moral, financial and criminal all at once.

What makes the WhatsApp trail especially ugly is the ordinary tone of the alleged communication. Kenya has always imagined corruption as something that happens in big offices, with brown envelopes, tenders, board minutes and signatures. But this kind of scandal belongs to a new era. The negotiations can happen on phones. The samples can move through links. The customer records can be stored in folders. The money can move through bank accounts, M-Pesa or intermediaries. The deal can be done without anyone touching a physical file.

That is why digital corruption is more dangerous than the old corruption Kenyans became used to. When someone steals money from a ministry, at least the theft can sometimes be seen in a stalled road, a ghost dam or a missing hospital. When someone steals behaviour, the damage is quieter. The victim continues living normally, not knowing that his identity, transactions, habits and gambling profile may have been turned into commercial ammunition.

The betting companies did not need to steal the whole country equally. They needed the people who mattered to their business. The complaint’s reference to 11.5 million punters is therefore the heart of the matter because it suggests that the real prize was not the entire Safaricom customer universe, but the gambling segment inside it. That is the crowd every betting company wants. That is the list behind the jackpot adverts. That is the secret audience behind the bonus messages. That is the group whose repeated losses can build empires.

Odibets grew during this same gambling boom, becoming one of the most visible betting brands in the country, while Kwikbets and other gambling companies also operated in a market where data advantage could mean faster growth, cheaper acquisition and sharper targeting. The documents now force the public to look beyond the colourful campaigns and ask how the customer bases were really built, which external lists were used, which intermediaries supplied data, which payments were made, and whether the private Safaricom information of millions of Kenyans became part of the betting industry’s backroom machinery.

The records now matter more than the public image. Customer database histories, marketing contracts, agency agreements, phone communication, M-Pesa transactions, bank movements and internal campaign logs from the period under review are the places where the truth of this scandal sits. The story is no longer about whether betting companies were popular. They were popular. The story is about whether part of that popularity was built using unlawfully obtained information that allowed selected operators to find gamblers with a precision ordinary advertising could never achieve.

This is also why the silence around the alleged corporate beneficiaries is disturbing. Kenya is very efficient when chasing small people but suddenly becomes philosophical when big money enters the room. Former employees can be charged, clerks can be questioned and middlemen can be named, but once the trail begins pointing towards companies with licences, lawyers, political friends and advertising budgets, the system starts moving like a tired donkey climbing a hill.

The WhatsApp market described in the complaint should therefore be read as the middle chapter of the scandal. It connects the alleged extraction of Safaricom data to the betting economy. It shows how customer information allegedly became a commodity. It explains why Odibets, Kwikbets and other betting companies cannot be treated as side characters in a story that was only about rogue telco employees. The data had value because there were buyers. The buyers had interest because the data could produce customers. The customers were valuable because betting companies make money from repetition, weakness and return.

This is the cruelty of the entire matter. The poor man thought he was betting against odds, yet the documents now suggest that the real game may have started long before he opened his betting account. His data may have already been sitting somewhere, discussed by people who knew his habits better than he imagined. His phone number may have been part of a list. His M-Pesa behaviour may have been part of a profile. His betting frequency may have been turned into a signal. His desperation may have been converted into market value.

The Safaricom data heist therefore exposes the rotten genius of the modern gambling economy. The companies do not only sell dreams. They study the dreamer. They do not only wait for the gambler. They look for him. They do not only advertise hope. They allegedly use data to identify the people most likely to keep buying that hope after repeated losses.

That is why Part Two of this series is about the WhatsApp market. It is about the moment customer data allegedly stopped being a stolen file and became a product moving towards people who could monetise it. It is about the messages, the samples, the alleged buyers, the intermediaries and the betting companies whose growth now sits under the shadow of Safaricom’s 11.5 million punters file.

In Part Three, we will move from the WhatsApp market into the money trail and examine how payments, bank records, M-Pesa movements, intermediaries and company records could reveal who financed the alleged data trade and who collected the rewards from Kenya’s stolen gambling map.

For many years, Kenyans were made to believe that betting companies became big because they understood football, marketing, youth culture and the desperation of an economy where a young man would rather risk KSh 50 on a weekend match than wait for a government that has no plan for him. We were told these companies were clever, that they understood the streets, that they understood banter, that they understood the psychology of a broke country where everybody is chasing one miracle to escape rent, school fees, debt, hunger and humiliation.

But after going through the documents now placed before investigative agencies, one begins to see a much darker story. The rise of some betting companies was not just about marketing genius, football jokes and colourful promotions. It was about data, access, insider dealings and Safaricom customer information allegedly walking out of the biggest telco in the country before landing in the hands of people who knew exactly what such information could do in a gambling economy.

This story begins inside Safaricom, not inside Odibets, not inside Kwikbets and not inside any betting shop where desperate men stare at odds like religious texts. That is important because before a betting company can target a gambler, someone must first know who the gambler is. Before a company can bombard a punter with odds, bonuses, inducements and messages, someone must first separate ordinary subscribers from people who bet regularly. Before anyone can know who stakes money, how often they stake, where they live, how they transact and which betting platforms they prefer, someone must first access the kind of information only a giant telco like Safaricom would have.

According to the complaint filed by Benedict Kabugi Ndungu and addressed to the Directorate of Criminal Investigations and the Gambling Regulatory Authority of Kenya, former Safaricom employees Simon Billy Kinuthia and Brian Wamatu Njoroge allegedly accessed, copied and sold personal data belonging to millions of Safaricom customers between June 2018 and May 2019. The complaint states that the data included full names, national identity card numbers, M-Pesa transaction histories, geolocation data, device identifiers, betting patterns, gambling frequency, amounts wagered and preferred betting platforms.

That is not a normal database and anyone pretending that this was just another ordinary customer list is insulting Kenyans. This was a complete map of how people lived, moved, spent, borrowed, lost and gambled. In the hands of an ordinary company, such information is sensitive. In the hands of a betting company, such information becomes a weapon because gambling is not sold to the rich man relaxing in his compound after dinner. It is mostly sold to the financially wounded man who is looking for rescue, and the more a company knows about his habits, the easier it becomes to keep him returning to the table.

Anyone who understands gambling will understand why such data is more valuable than billboards, radio adverts, influencer campaigns and the noisy promotions betting companies keep throwing around. A betting company does not need the whole country. It needs the right people. It needs the man who loses today and still comes back tomorrow, the customer who deposits small amounts many times, the student who thinks football knowledge can pay rent, the boda rider who believes one jackpot can remove him from daily struggle, the watchman who bets after salary, the jobless graduate who has lost faith in employment and the young father trying to convert pressure into luck.

With such data, a betting company is no longer advertising blindly. It is hunting with night vision.

That is why this scandal cannot be reduced to a small data protection story or some boring fight between lawyers, regulators and former telco employees. This is not about a random spreadsheet leaking somewhere. This is about millions of Kenyans allegedly being profiled, studied and converted into betting targets. When a gambling company knows a person’s identity, M-Pesa behaviour, betting frequency, location, amounts staked and preferred platforms, the company does not need to guess the weakness of that person. It already has the wound and only needs to press it repeatedly.

The complaint claims that up to 29.9 million Safaricom customer records were accessed, while a specific profile of about 11.5 million punters was allegedly available. That figure alone should shake the country because eleven and a half million people were allegedly not just subscribers, but gamblers whose behaviour could be isolated, packaged, valued and sold. In any serious country, such a trail would not be treated as a minor corporate embarrassment but as a national digital robbery whose victims may not even know that they were robbed.

The documents further state that the stolen data was allegedly marketed, sampled, negotiated over and distributed to third parties, including gambling companies. The complaint places Odibets, Kwikbets and other betting companies at the centre of the trail that is now before investigators over the alleged receipt, use or commercial benefit from unlawfully obtained Safaricom subscriber data. It also refers to forensic WhatsApp material said to contain discussions around samples, payments, buyers, contacts and movement of customer records.

This is where the matter stops being a Safaricom employee scandal and becomes a betting industry scandal. Data is not stolen for decoration. It is stolen because someone wants it, someone pays for it, someone receives it, someone uses it and someone profits from it. The corporate side of the transaction is therefore the real story because focusing only on the employees accused of touching the data while ignoring the commercial beneficiaries would be the usual Kenyan trick of arresting the messenger while the powerful people continue eating in peace.

The next stage of the scandal is about the records. The customer acquisition machinery of Odibets, Kwikbets and other betting companies now sits at the centre of the story because the trail points to a market where Safaricom subscriber information allegedly became betting intelligence. The phone records, bank movements, M-Pesa trails, marketing contracts, agency agreements, internal communications and customer database histories from that period are the documents that can show how the data moved, who handled it, which intermediaries were involved, which companies benefited and how private telco records allegedly crossed into the gambling world.

And this is where Odibets enters the movie properly.

Odibets did not become a household name by accident. It grew in the middle of Kenya’s betting madness, when young people were being swallowed by football odds, jackpots, virtual games and the false promise that one lucky slip could repair a lifetime of economic failure. The brand became visible everywhere, from streets to phones to football conversations. The public saw the colours, slogans, promotions and cheerful campaigns. What the public did not see was the machinery behind customer acquisition, the data sources, the internal networks, the middlemen and the shortcuts used to identify and reach punters.

The complaint now places Odibets, trading under Kareco Holdings Limited, among the companies whose records are part of the wider trail. It also raises questions around Kwikbets and other gambling companies, while pointing to phone records, bank records, M-Pesa records, company records, intermediaries and associated accounts covering the period in question. The gambling regulator is also drawn into the matter because licensing a betting company is not only about allowing it to take bets. It is also about ensuring that the company did not build its market through unlawfully obtained customer information.

This is not a public relations matter and no amount of polished statements can erase the data trail. It is a money trail, a customer acquisition trail and a regulatory failure that now exposes how weak Kenya has been in supervising companies that make billions from human desperation. Betting companies operate in one of the most sensitive sectors in the country because they sell hope to people who are already financially wounded, and when such companies are linked to unlawfully obtained telco data, the issue moves beyond business competition and becomes a question of exploitation.

Kenya must stop pretending that betting companies are ordinary entertainment businesses. These are companies whose profits depend on repeated human behaviour, emotional weakness, economic frustration and the belief that one correct prediction can defeat years of poverty. That is why access to private customer data becomes so dangerous. A normal advertiser can only shout into the crowd and hope the right people hear. A gambling company armed with behavioural data can identify the people already trapped in the habit and follow them with precision.

This is the same country where a poor man who steals a chicken can be beaten before police arrive, yet companies can allegedly sit on stolen customer data and continue operating as if nothing happened. It is the same country where regulators enjoy launching guidelines but disappear when real files land on their desks. It is the same country where corporate Kenya has perfected the art of looking clean in public while rotten deals are cooked through WhatsApp groups, hotel meetings, private offices and networks of middlemen who know how to move between insiders and buyers.

The Safaricom data heist may become one of the most important scandals in Kenya because it shows the new face of corruption. In the past, people stole land, tenders, maize, cemetery money and road funds. Now the clever ones are stealing behaviour. They want to know who a person is, where he lives, what he spends, what he fears, what he desires and when he is most likely to make a bad decision. That is more dangerous than stealing a file from a ministry because behavioural data does not just describe a citizen. It predicts him.

For a betting company, that kind of information is not merely useful. It is deadly.

The victim is not just Safaricom. The victim is the Kenyan whose private life was allegedly converted into betting fuel without his knowledge. The victim is the man who thought he was simply receiving another betting message, yet behind that message may have been a stolen profile of his habits, losses, location, phone identity and financial behaviour. The victim is the citizen who trusted Safaricom with his details because modern life in Kenya almost forces everyone to trust Safaricom with everything.

The Odibets trail now becomes central because the company represents the wider question of how betting empires were built during Kenya’s gambling gold rush. Was the growth of these companies powered only by marketing, sports sponsorships, branding and aggressive promotions, or did stolen Safaricom subscriber intelligence provide the shortcut that allowed selected operators to locate gamblers faster, target them better and extract more value from their desperation?

That is the question this series will follow from the first data sample to the final customer campaign.

We will go through the documents slowly, examine the Safaricom insider trail, follow the forensic WhatsApp material, look at how the customer records allegedly moved, study the role of Odibets, Kwikbets and other betting companies, and expose how the private information of millions of Kenyans allegedly became part of the betting industry’s growth machine.

Because this story is not just about data.

It is about how Kenya’s gambling gold rush was powered by stolen knowledge of the poor man’s desperation.