Here is a policy of a London casino explaining their facial recognition to be compliant with the gdpr. I suppose this was written pre-brexit.

https://www.hippodromecasino.com/facial-recognition-policy/