Unless they are operating outside of Europe, I would imagine any casino would come down like a ton of bricks on the affiliate or affiliates responsible. GDPR has real teeth. Plus if you are in the UK and receiving these SMS messages, then complain direct to the UKGC.