John Pierce, commission director of enforcement at the Gambling Commission, said the size of the payment “reflects the seriousness of the failings identified”.
“These failings should never have occurred,” he said.
“While the licensees co-operated fully with the investigation, accepted the failings early and implemented an action plan quickly, this immediate response is the minimum we expect from operators when serious shortcomings are identified.”
Mr Pierce added: “Over-reliance on automation and failure to intervene when clear harm indicators are present exposes consumers to unnecessary risk.”
Four operators trading under the names Paddy Power and Betfair – PPB Entertainment, PPB Counterparty Services, Betfair Casino and TSE Malta – will pay the money as part of the settlement.
The £2m “payment in lieu of a financial penalty” is the second time in two years that Paddy Power Betfair has faced regulator action.
The company was ordered to pay £490,000 in 2023 for sending promotional push notifications to vulnerable customers, who had signed up to exclude themselves.
A spokesperson for Flutter’s UK and Ireland business said: “Flutter takes its safer gambling responsibilities incredibly seriously and we firmly believe that we lead the industry in player protection.
“Customer safety is our number one priority and there is no suggestion that any of the customers reviewed by the Gambling Commission experienced any harm.
“Our controls have evolved significantly and we recently introduced a next generation customer safety platform, with the vast majority of checks now happening in real-time.
“As such, we are confident that the issues highlighted by the commission in its public statement would not be repeated today.”
