Online gambling firms may be breaking the law by making it very difficult for players to collect their winnings, the competition regulator says.