Gambling firms risk falling foul of the Data Protection Act because they radically underestimate their responsibilities when they use CCTV security systems, according to a leading UK technology law expert.