I believe the new rules allow people to be given the data that a company has on them. So if SportsSpread owe money the data will either show that (i.e. they admit it) or they will deny having data or not respond which could get them in trouble under the GDPR rules. I think.