title: Sri Lanka — Technical compliance: What must the platform meet? | advennt.io canonical: https://advennt.io/jurisdictions/sri-lanka/technical/ [Jurisdictions](https://advennt.io/jurisdictions/) [Sri Lanka](https://advennt.io/jurisdictions/sri-lanka/) Technical compliance Sri Lanka · Question 08 of 11 # Technical compliance: What must the platform meet? Mixed · Uncertain · AI-generated · [Back to full Sri Lanka report →](https://advennt.io/jurisdictions/sri-lanka/) Key section parameters | Jurisdiction | Sri Lanka (LK) | |---|---| | Regulator | Recorded in register | | Favourability | Mixed | | Confidence | Uncertain | | Review status | AI-generated | | Last collected | 18 Oct 2026 | Summary answer The GRA Act regulates gambling software (s.33), requiring self-imposed limit tools, addiction warnings with support links, self-exclusion enforcement, and compliance with the Personal Data Protection Act No. 9 of 2022 and cybersecurity measures. Detailed technical standards, RNG/certification specif… ## Full section analysis The GRA Act regulates gambling software (s.33), requiring self-imposed limit tools, addiction warnings with support links, self-exclusion enforcement, and compliance with the Personal Data Protection Act No. 9 of 2022 and cybersecurity measures. Detailed technical standards, RNG/certification specifications and data-localisation rules have not yet been published by the GRA. TRCSL web-blocking has historically been applied to gambling sites; VPN use is widespread; DPI infrastructure is limited.