Playtomic Bot: Is It Legal? What You Need to Know

UK law: the Computer Misuse Act turns on consent

The Computer Misuse Act 1990 makes it an offence to cause a computer to perform a function with intent to secure unauthorised access (section 1), with heavier offences for access meant to enable further crimes (section 2) or to impair a system (section 3). Everything hangs on "unauthorised", which section 17(5) defines: access is unauthorised when you are not entitled to control it and you do not have consent, from the person who is, "to access of the kind in question".

Apply that to a booking bot:

• You log in to your own account, with your own password. Playtomic gave you that account to book courts.
• The terms put no limit on how you book: they say nothing about automated access.
• The bot books a court and pays for it. It does not reach data or functions your account cannot reach by hand.

That is why a personal booking bot sits on the authorised side of the line. The phrase "of the kind in question" is also where the analysis would turn. If Playtomic told a user, or wrote into its terms, that automated access is not allowed, a court could treat automated access as a kind it had not consented to. That has not happened as of 24 September 2026, and we are not aware of any prosecution under the Act over a consumer booking tool.

The Data Protection Act 2018 and UK GDPR do not regulate your use of a bot. They regulate the company that stores your credentials, which is covered below.

EU law: GDPR binds the tool, not the player

GDPR. It applies to any service that processes your Playtomic email and password. It obliges that service to secure the data and delete it on request. It says nothing against you automating your own bookings.

Digital Services Act. In force for all platforms since February 2024, it puts transparency and moderation duties on platforms such as Playtomic. It creates no rule against users relying on third-party tools.

Digital Markets Act. It is sometimes cited as a pro-interoperability argument. It only binds the large platforms designated as gatekeepers, and Playtomic is not one, so it does not help or hurt here.

Ryanair v PR Aviation (CJEU, C-30/14, 2015). The court held that where a database has no copyright or database-right protection, its owner can still restrict its use by contract. The case was about a commercial price-comparison site reusing flight data, which is not what a personal booking bot does. Its lesson is the same one as above: the platform's own terms are what decide the question.

French law follows the same logic through article 323-1 of the Code pénal. Our French version of this analysis goes through it.

Where the real risk sits

Since the exposure is to Section 23, the useful question is which behaviours clash with the terms as written. Automation is not in the list. These are:

• Sharing one account between several people. Section 4 asks for true contact details, and the account is a personal licence.
• Creating extra accounts to multiply attempts. Same section, and it looks like the kind of misuse platforms act on.
• Booking courts nobody intends to play. Holding slots and not showing up breaks club rules and the punctuality standard in section 4, and it costs the club money.
• Reselling slots. The licence is personal, and a paid booking resold to a stranger is hard to call a legally valid purchase for your own use.
• Hitting the servers far more often than a person would. Anything that degrades the service for other players is misconduct whatever the terms say about bots.

A bot that books one court for you, under your name, that you then play or cancel within the club's rules, does none of these.

What Padel Snipe does with your account

So you can judge the above against a real service, this is how ours works:

• It books under your account. In most cases it goes through the same booking pages you use on playtomic.com in a browser and pays with the card saved on your Playtomic account, at the public price. If you are a member of the club, it books at your member rate. Either way the club sees a normal booking in your name.
• It books the slots you set up, nothing else. You pick the club, the day and the time. You play the court or cancel it under the club's rules.
• Your credentials are encrypted. Playtomic credentials are encrypted with AES-256-GCM before storage and deleted as soon as you disconnect Playtomic or delete your account. Account data is deleted 30 days after account deletion. Both points are in our privacy policy.

The mechanics of a booking bot, from watching the opening to confirming the payment, are explained in how a padel court booking bot works. The same guide walks through the setup, which takes about two minutes.

If Playtomic changes its terms

Two changes would matter.

A clause banning automated access. Using a bot would then breach the contract, which is a civil matter, and the suspension risk would rise. Under the Computer Misuse Act, automated access could also start to look like access Playtomic has not consented to. A booking service would have to adapt or stop, and players would have to decide for themselves.

Technical changes. Playtomic reworked its booking front in summer 2026. Changes like that break bots for a while. They say nothing about legality.

Neither changes the advice for a player today: one account per person, real bookings, and respect for the club's cancellation policy.

Sources

• Playtomic, legal conditions, sections 3, 4 and 23, read on 24 September 2026.
• Computer Misuse Act 1990, sections 1 to 3 and 17.
• Court of Justice of the EU, Ryanair Ltd v PR Aviation BV, case C-30/14, 15 January 2015.
• Padel Snipe, privacy policy, storage and deletion of Playtomic credentials.