To prevent duplicate accounts, a golf club needs three things: one verified identity per member, booking rules that say plainly what is not allowed, and a booking process that gives nobody a reason to create a second login. Checking accounts once is not enough. The club also has to make the fair route the easy route, and keep within UK GDPR while it does so.
This guide is written for club managers, committee members and competition secretaries. It covers why duplicates appear, how to spot them, which checks work without annoying honest members, and what to do when you find one.
TL;DR
- Duplicate accounts usually exist to get more attempts at popular tee times, so the lasting fix is a booking process where extra accounts bring no advantage.
- Verify each member against your own membership records, and use separate email addresses for people who share a household.
- Put the rules in writing: one account per member, no sharing of logins, no automated tools. Scottish Golf recommends exactly this kind of policy.
- Record why you hold and check data, tell members in a privacy notice, and keep an audit trail of what you changed.
- A queue-based waiting room removes the fastest-finger race that makes duplicates worth creating.
Table of Contents
- Why members create duplicate accounts
- What duplicates cost a club
- How to spot duplicate accounts
- Identity checks that do not put members off
- Write the rules down
- Doing it lawfully: data protection for duplicate checks
- What to do when you find a duplicate
- Remove the reason to duplicate
- How BallChute fits
- A simple 30-day plan
- FAQ
- Sources
Why members create duplicate accounts
Nobody opens a second account for fun. In most clubs it happens for one of four reasons.
An advantage in a scramble. When popular Saturday and Sunday slots go within seconds of release, a second login looks like a second chance. It is the same motive that drives bots and shared credentials. Our piece on businesses selling an advantage on your tee sheet looks at how far this can go.
Forgotten details. A member loses their password, cannot get the reset email, and registers again with a new address. This is the most innocent kind, and the most common.
Changed details. New email provider, new mobile number, a married name. The old record stays behind and a new one appears beside it.
Family and household sharing. One email address used by a couple, or a parent booking for a junior, produces confusion about whose account is whose.
The point matters because it shapes the cure. If the cause is an advantage, blocking accounts one by one only moves the effort elsewhere. If the cause is forgetfulness, a clean recovery route does more than any ban.
What duplicates cost a club
The damage is practical rather than dramatic.
- Unfair access. A member holding two logins can try for two slots in the same instant, and others lose out.
- Blocked or phantom slots. Bookings held under an account the member has stopped using can go unplayed.
- Messy records. Handicap, competition entries and no-show history split across two profiles make the secretary’s job harder.
- Member complaints. Fairness complaints tend to land on the same few officials every release day.
There is a real-world example of how large this can get. GOLF.com reported in June 2024 that Bethpage’s management spent months vetting every account in its reservation system and found hundreds of individuals with duplicate accounts, which were deleted. A UK members’ club is a different setting, but the pattern is familiar: where demand outstrips supply, extra accounts follow.
How to spot duplicate accounts
Start with the data you already hold. A review does not need special tools, just a methodical pass through the member list.
Match on stable details
Compare records for the same full name, date of birth, home address or membership number. Two profiles that match on a stable detail but differ on email address are the classic duplicate.
Look for near-matches
Nicknames (Bob and Robert), swapped first and last names, typos and initials all hide duplicates from a simple search. Sort the list alphabetically by surname and read it. It is dull work and it catches a lot.
Watch behaviour around release time
Scottish Golf’s guidance on automated booking tools advises clubs to monitor unusual booking patterns, repeated complaints, high cancellation rates and activity around tee sheet release times. Those signals help with duplicates too. Two accounts that log in within the same second, or that book and cancel in a pattern, deserve a closer look.
Check cancellations and no-shows
A login that books often and rarely appears on the course may be a spare account used to hold slots. Cross-check against your own records of who actually played.
Identity checks that do not put members off
The aim is to confirm that each account belongs to one real, current member, with as little friction as possible. These checks are listed from lightest to heaviest.
| Check | What it catches | Effort for the member |
|---|---|---|
| Match to the membership list at sign-up | Accounts for people who are not members, and repeat sign-ups with the same membership number | Very low |
| Confirmed email address (click a link) | Typos and made-up addresses | Low |
| Membership number plus date of birth or postcode | Someone registering as another member | Low |
| Secretary approval of new accounts | Anything the automated checks miss | None for the member, some time for the club |
| Document check by email | Residency or identity disputes | Higher, so keep for exceptions |
Bethpage chose the heavy end, because it had to confirm residency: its process asked for an emailed copy of a New York driver’s licence or official state ID. A private members’ club rarely needs that. You already know your members, and your membership list is the best verifier you have. Reserve documents for the odd disputed case.
Handle households sensibly
Couples and families often share an email address. If your system keys on email, give each person their own address where you can, or a separate login linked to the shared household. Tell members this at joining. It is far kinder to explain it once than to delete an account later and upset a long-standing member.
Make recovery easy
A working password reset and a named person to call remove the main innocent cause of duplicates. Put the secretary’s or office’s contact details on the login page.
Write the rules down
A technical check only works when the club has a stated policy behind it. Scottish Golf recommends that clubs make sure their booking policies clearly prohibit automated booking tools, scripts, third-party booking services and the sharing of login credentials. Add one account per member to that list.
A short policy might say:
- Each member may hold one booking account, linked to their membership number.
- Logins are personal and must not be shared or lent.
- Bookings may only be made by the member, or by a person the member has authorised in the club’s agreed way.
- Automated tools and third-party booking services are not permitted.
- Breaches may lead to booking restrictions under the club’s disciplinary procedure.
For wording and structure, our booking fairness policy checklist for UK venues sets out the two rulebooks a club should reconcile. Whatever you adopt, take it through the committee and publish it in the newsletter and on the noticeboard, so no member can say they did not know.
Doing it lawfully: data protection for duplicate checks
Verifying members and investigating accounts means handling personal data, so UK GDPR applies. The practical points are these.
Choose and record a lawful basis. The ICO’s previously asked questions page says organisations must choose an appropriate lawful basis when collecting and using personal information about members, and that legitimate interests and consent are likely to be the most appropriate. For legitimate interests, the ICO describes a Legitimate Interest Assessment covering the purpose, necessity and a balancing test. Keeping fair tee-time access is a clear purpose, and checking the member list is a proportionate way of doing it. Write that reasoning down.
Keep a record of what you hold. The ICO’s self-assessment for small organisations is described as suitable for small membership organisations such as sports clubs. It says records should cover the type of data held, how it was obtained, why it is held, how long it is kept, whether it is shared and whether it is special category data.
Tell members in a privacy notice. The same ICO assessment lists what a notice should include: who is responsible for data protection, why the data is held and on what lawful basis, where it came from, who it is shared with, how long it is kept, how people can ask for access or correction, how to complain to the ICO, and whether automated decisions or profiling are used.
See how other clubs word it. London Golf Club’s privacy policy says it uses personal data to verify identity, age and eligibility where required, and to prevent fraud, error and other unlawful activities. Monifieth Golf Links says it processes data to prevent, investigate or report fraud and misrepresentation, and that it retains member data while a person remains a member and for up to three years afterwards. These are their policies, not a template for yours, but they show the kind of plain statement members expect.
Know who is who with your software. Our UK club guide to data privacy in tee-time booking explains that the club is the controller and the booking software supplier is the processor, and that the ICO sets out what the contract between them must contain.
The ICO also makes the business case: by keeping personal information accurate, relevant and safe, clubs can save time and money and build confidence. Clean member records are good governance as well as good tee-sheet hygiene. The GCMA has also warned that even names, addresses and dates of birth are valuable to criminals, so collect only what you need and limit who can see it.
What to do when you find a duplicate
Treat the first case as a records problem and assume good faith. Then escalate only if the evidence supports it.
- Do not delete anything yet. Export or screenshot both accounts, including booking history, so the record is preserved.
- Identify the real member. Check against the membership list.
- Contact the member privately. Ask which account they want to keep and why there are two. Most will say they forgot a password.
- Merge or close. Move any future bookings to the account being kept, then close the other. Note the date and reason.
- Apply the policy if needed. If an account was used to gain extra bookings, refer it to the committee or match committee under your written rules, in line with your normal disciplinary route.
- Log the outcome. A one-line record protects the club if the case is questioned later.
Watch for the opposite error too. Two people with the same surname and address are often a couple, not a duplicate. Confirm before you close anything.
Remove the reason to duplicate
This is the part many guides skip. As one top-ranking article on multiple account creation puts it, blocking a duplicate does not remove the reason it was created. For tee times, the reason is the race.
In a fastest-finger release, speed decides, so every extra login is an extra chance. Scottish Golf suggests booking limits under a fair use policy, or flexible tee-sheet release times, to reduce the pressure. A queue goes further: when members enter an orderly line and take turns, a second account gains nothing, because it joins the same line behind the same person.
Our articles on turn-based tee booking, fair tee-time booking and piloting the queue for release schedules show how clubs set this up. If double bookings are also an issue, see how to prevent overbooked tee times.
Perspective
We built BallChute because the real problem is rarely a dishonest member. It is a booking system that rewards whoever clicks fastest, and then asks officials to police the consequences.
Our view is that fairness should be designed in. A club-controlled waiting room lets the club set its own rules and time limits, so members can make their selections without racing anyone. When there is no race, there is far less reason to hold a second login, and far less for the secretary to chase.
It also matters who gets left behind. Members who are less confident online lose most in a scramble. An orderly queue gives them the same chance as everyone else.
We are clear about what we do. BallChute does not replace your membership or competition system. It focuses on high-demand releases, and it works alongside what you already use to know who your members are.
Simon
How BallChute fits
BallChute is tee-time booking software for golf clubs. It gives members an online waiting room and turn-based booking, lets the club set its own booking rules and time limits, and includes member verification, group selection and downloadable or emailed tee sheets. Clubs using Intelligent Golf can use the integration option; see fairer releases for Intelligent Golf clubs.
Plans are published at £29 per month or £290 per year for Standard, and £35 per month or £350 per year for Intelligent Golf, each per club. There is a 14-day free trial with no automatic fees. You can see both plans and start on the BallChute site.
Not sure which release format suits your club? Our comparison of waiting rooms, fastest-finger booking and tee-time ballots will help you decide.
A simple 30-day plan
Week 1: audit. Export the member and account lists. Match on membership number, date of birth and address. List suspected duplicates.
Week 2: resolve. Contact members, merge or close accounts, and keep a log.
Week 3: policy and privacy. Agree the one-account rule with the committee, update the booking policy, and check the privacy notice and your record of data held.
Week 4: remove the incentive. Decide how popular slots will be released, and brief members on the new process before the first release.
FAQ
What is a duplicate account in a tee-time booking system?
It is a second login for the same member, created under a different email, name spelling or number. It may be innocent, such as a forgotten password, or it may be used to get extra attempts at popular slots. Your policy should treat the two differently.
Can members share an email address?
It is better if they do not. People in the same household who share an address can find that only one registration is possible in some systems, so give each person their own address where you can. Explain this when they join, and never close an account without checking first.
Do we need consent to check members’ details for duplicates?
Not necessarily. The ICO says legitimate interests and consent are likely to be the most appropriate lawful bases for member data, and legitimate interests needs a documented assessment. Choose one, record it and tell members in your privacy notice. If you are unsure, ask the ICO or your own data protection lead.
Should we ban a member who has two accounts?
Not as a first response. Speak to them, close the extra account, and record it. Take further action only if the account was used to gain extra bookings, and only under a written policy that members have seen.
Will a waiting room stop duplicate accounts?
It removes the main reason for them. Because members join a queue and take turns, a second login brings no speed advantage. You should still keep member verification and a written one-account rule.
Sources
- To protect its tee sheets, Bethpage cracks down on bad actors (GOLF.com)
- Guidance against automated booking tools (Scottish Golf)
- Previously asked questions (ICO)
- Data protection self-assessment for small organisations (ICO)
- Privacy Policy (London Golf Club)
- Privacy Policy (Monifieth Golf Links)
- Protect your golf club from cyber criminals (GCMA)