Gambling firm hit with record £19m penalty for failing to protect customers and weak anti-money laundering controls.