Themes ›
Technical Standards

Technical Standards

Technical standards, certification, hosting and server rules, platform and equipment requirements.

Flags
151
Jurisdictions
82
Read order
Theme-major

28 further jurisdictions with flags in this theme are in expert review and not shown until published.

Cross-jurisdiction posture cluster

151 flags across 82 jurisdictions. Posture mass: Rules 57 · Risks 35 · Reality 59.

Worked examples

Each links back to the full jurisdiction page — the theme view is a projection of those country ledgers.

Colorado — State →
Accepting wagers from outside Colorado

Geolocation is mandatory; out-of-state wagers breach federal and state law.

3 technical standards flags on this jurisdiction · see full country page
Indiana — State →
Accepting wagers from outside Indiana

Geolocation is mandatory; out-of-state bets are unlawful.

3 technical standards flags on this jurisdiction · see full country page
🇮🇩 Indonesia →
ITE Law Art. 27(2) criminalises gambling content

Marketing/affiliate distribution is a criminal offence.

2 technical standards flags on this jurisdiction · see full country page

Rules · Risks · Reality across the cohort

Lens · which facet of each jurisdiction’s flags:
Showing all facets.
Accepting wagers from outside Colorado

Geolocation is mandatory; out-of-state wagers breach federal and state law.

Accepting wagers from outside Indiana

Geolocation is mandatory; out-of-state bets are unlawful.

ITE Law Art. 27(2) criminalises gambling content

Marketing/affiliate distribution is a criminal offence.

Failure to integrate CSE via API

Mandatory precondition; non-integration blocks go-live.

Inadequate Alberta-only geolocation / VPN controls

SRIG requires enforcement of Alberta-only play with evasion controls.

Operating without a .bet.ar domain

The .bet.ar domain is mandatory and the key public marker of legality.

No RENAPER biometric verification at login/withdrawal

Federal mandate requires biometric verification at each login and before withdrawals.

No GLI-accredited RNG certification

CABA technical regulations require GLI-accredited RNG certification.

Missing geolocation controls

Geolocation is mandatory to confine the offering to province boundaries.

Geolocation failure

Accepting out-of-state wagers breaches the geolocation requirement.

Unapproved platform supplier

Platform/technology suppliers require ADG approval.

BTRC blocks 4,600+ sites, 447 apps, 16,000 social links

Extensive access interdiction; constant domain rotation required.

Strict data localisation

Requires Brazil-based infrastructure.

Storing data outside Bulgaria

Online betting data localisation mandate.

No NRA replication server

Required for real-time NRA reporting.

Uncertified RNG

Approved laboratory certification required.

Serving non-Ontario players

Geolocation to Ontario required; liquidity ring-fenced.

Uncertified games at launch

Technical certification required pre-go-live.

Relying on claimed geo-exclusion as a defence

Great Firewall makes circumvention detectable; not a defence to Art. 303

SRC-CN-001
Failure to host servers domestically

Breaches a core Res. 136-2024 licence condition.

No geolocation

Geolocation mandatory for FR-licensed operators.

Uncertified gaming systems

Pre-launch ANJ approval required.

€1 max stake per spin on slots

Severely caps slot revenue per session vs offshore competitors.

Uncertified wagering system

Systems must pass independent testing-lab certification.

Systematic IP/DNS blocking

Player access is actively interdicted.

Listing a gambling app for PK users

Apps are blocked and store availability is restricted.

Hosting betting servers outside Kazakhstan

Breaches the server-localisation licence condition.

Systematic ISP-level DNS blocking; ~3,200 active domain blocks

Access to offshore sites is actively and increasingly suppressed.

Failure to geolocate players within Massachusetts

Wagering must occur within state boundaries.

Servers outside Michigan/approved locations

Breaches MGCB technical standards and hosting requirements.

Funnull-type IP/hosting suppliers

OFAC sanctioned bulk IP supplier to scam sites.

Any local entity formation

No safe corporate vehicle; sanctions screening failure risk.

VPN/proxy access to circumvent blocks

Treated as illegal access in itself.

Inadequate geolocation controls

Play must be confined to in-state players.

Inadequate geolocation allowing out-of-state wagers

Players must be physically in Ohio; geofencing alone may not suffice per OCCC.

Uncertified RNG/software deployed

JCJ mandates third-party certification; deployment without it breaches registration.

No geolocation gating

Player must be physically in PH.

Content/credit supply to overseas KR-facing platforms

Captured in cross-border crackdowns.

Reliance on Saudi user access via VPN

VPN circumvention is illegal and monitored; CST blocks at the gateway.

Failing near-real-time data streaming

Operators must stream operational data and file monthly returns by the 5th.

Mandatory Slovak server localisation

Capex and infrastructure burden distinct from EU norms.

No real-time DGOJ data integration

RD 1613/2011 requires real-time monitoring integration.

Uncertified platform launch

Platform must be certified for functionality and security pre-launch.

Supplying gambling software without s.33 licence

Illegal to develop, distribute or operate gambling software without GRA licence.

Relying on member-only access to evade prohibition

2022 amendment closed the restricted-access loophole.

Lottery game manipulation

Integrity amendments criminalise interference severely.

Prior published record asserted an AML and player-protection void, a fixed restricted-country list, a single-casino cap, crypto acceptance and a sole-DLAG gateway, none of which survives contact with the regulator-published text.

Downstream consumers (LRE documents, subscriber reports, jurisdiction pages) may still carry the withdrawn propositions and require re-generation.

Unlicensed software supply

B2B software must be UKGC-licensed.

SRC-GB-001
Uncertified RNG

GLI-19 / RTS certification required.

SRC-GB-003
Inadequate geolocation

Geolocation is mandatory to enforce intrastate operation.

SRC-US-002
Failing geolocation enforcement

Out-of-state wagers breach § 58.1-4036.

Supplying platform without supplier licence

Vendor/supplier functions require Lottery approval.

No suspicious-activity detection

Operators must detect/report suspicious betting.

Uncertified betting system

Systems must be certified by Lottery-approved labs.

Fraud settlement involving core platform vendor (GambetDC contract)

Signals systemic vendor-oversight weaknesses in state/district-operated gaming infrastructure procurement.

Notification Matrix obligations ignored

AGLC Notification Matrix sets mandatory information, frequency and format.

Weak geolocation / customer-location verification

Required for POC tax and IGA targeting.

5,179 SIM cards suspended for gambling use

Telecom-layer enforcement against agents and users.

Domestic server localisation

Servers must be located in Belgium.

The injected T2 anchor hosted at invest.gov.bz under a filename referencing 'Lotteries Control Act 152' in fact serves Gaming Control Act Cap 152 text.

File/label mismatch risks mis-citation of the wrong historical Act if not independently verified before reliance.

Mandatory accredited-lab certification

Certification bottleneck/cost.

Assuming no geolocation requirement

PlayNow geolocates to BC; private access without authorisation is unlawful.

Unapproved software updates

NRA approval required for new versions.

Software not registered with Metrology Institute

Registration mandatory.

Unregistered gaming equipment/software

Equipment and software must be certified/registered with CGMC.

Crypto gambling without guidance

No AGCO crypto specification yet; self-certification carries reassessment risk.

VPN reliance to reach Chinese users

Active VPN crackdown; reachability still engages liability

SRC-CN-011
Hosting/CDN/DNS infrastructure China-facing

Domain takedown powers (CAC/MPS) and accomplice liability

SRC-CN-011
Weak KYC at onboarding

KYC confirming age and identity is required before wagering.

Server-residency requirement unconfirmed

Hosting obligations not fully verified against Technical Standards.

Domestic server localisation

Infrastructure cost and operational constraint.

Geolocation mandatory for in-state play

Out-of-state play is blocked; technical failures risk compliance.

Hosting tied to approved locations

Server flexibility constrained by Lottery specifications.

Distributing gambling app via stores

App stores restrict gambling for Egypt; NTRA can order removals.

Reliance on VPN tolerance

VPN use tolerated generally but gambling-specific use carries legal risk.

5-second minimum spin duration

Reduces play velocity and revenue.

No autoplay / no jackpots on slots

Product feature restrictions reduce competitiveness.

LUGAS integration friction

Integration is a technical bottleneck for new entrants; operators not connected cannot operate.

Server localisation in Greece

Mandatory data-localisation increases infra cost.

Pre-launch game certification

Time-to-market delay.

Ad-platform restrictions

Google/Meta limit gambling ads to licensed.

Failure to report suspicious wagering to integrity tip line

IGC requires integrity reporting.

Encouraging VPN circumvention of blocks

Circumvention does not legalise activity and adds exposure.

Assuming no IR technical certification

CMC requires equipment inspection and self-examination/reporting; non-compliance risks licence action.

GRA technical standards unpublished

RNG/data requirements not yet assessable.

Operator-funded independent platform accreditation

Adds cost and lead time to launch.

Transparent DNS proxying defeats alternative-resolver bypass

Standard DNS-change workarounds are being neutralised.

Weak software authentication

Digest must be at least 128-bit complexity.

Using unregistered vendors

Operators must use Board-registered vendors.

ANRT DPI capacity

Sophisticated interdiction infrastructure available.

VPN-routed access

VPN use technically criminal under Cybersecurity Law.

Missing biometric KYC/CCTV at land-based casino

Mandatory under Casino Regulations 2082.

Hosting interactive systems outside approved locations

Approved-location hosting required under Reg 14.

Server-at-facility requirement

Restricts hosting flexibility (statutory).

Lack of GLI/iTech certification

Game fairness certification required

SRC-NG-004
Failing JCJ technical audit

Equipment/software subject to regulatory review.

Hosting servers offshore

Domestic hosting historically required.

Facilitating VPN circumvention

Access-interdiction risk.

App-store distribution of KR gambling app

Restricted availability.

Mandatory CMS connectivity

Operators must integrate with RDB monitoring; non-compliance risks licence action.

Hosting gambling content reachable from Saudi Arabia

CST blocks and authorities may pursue facilitation charges.

Non-compliant transaction equipment

2024 standards mandate compliant deposit/withdrawal devices.

Mandatory in-Seychelles hosting of player registration servers

Raises infrastructure cost and complicates multi-jurisdiction platform architectures for interactive licensees.

Reliance on VPN access to offshore sites

Access interdiction is systematic; legal protection absent.

VPN-based access circumvention

Does not cure criminality of the underlying activity.

Sports Betting Management System remote access

Mandatory operational data feed to GBT/TRA.

App-store/ad-platform unavailability

No distribution route for gambling apps/ads in Thailand.

Foreign-group dependency for Promosport tech (Sisal/Flutter)

Single-supplier concentration; entry only via that contract

VPN use to mask location

VPN use voids winnings and breaches eligibility rules; geolocation strictly enforced.

Register discrepancy vs Play971 launch

Public licensee register completeness unverified — diligence cannot rely solely on it.

Sub-2.5s slot spin

RTS 14D minimum spin time breach.

SRC-GB-003
Severely degraded internet infrastructure

Service reliability and geolocation impossible to guarantee.

No enforced geolocation/RNG/RG standards

No technical safe harbour; compliance must be self-imposed.

Five bordering states

Geolocation accuracy near borders is critical; failure exposes out-of-state wagering liability.

Reform-regime technical standards not yet published

Cannot pre-build to unknown specifications.

Assuming IGCO technical standards are finalised

Standards still being published post-commencement.

No published RNG/geolocation standard

Technical certification expectations are unclear pending ARJ specs.

Assuming server-residency requirement absent permanently

Data-localisation module is not-yet-assessed; confirm Division standards.

Incident-reporting SLA unverified

Compliance scope unclear.

Single platform vendor dependency

Concentration risk on RSI/Scientific Games supply.

LOPDP data obligations

Personal-data processing rules apply even absent gambling-specific tech rules.

Mandatory EMTA reporting connection

System integration is a permit precondition.

No published certification regime for private operators

Compliance requirements undefined for any future entrants.

New reporting obligations

Annual audit + quarterly compliance reports under P.A. 103-0592.

Assuming no future technical standards

Software-system conditions to be set; not_yet_assessed.

Centralised player-data controls

Integration and data-governance obligations.

Pre-launch DICJ game approval

Land-based equipment must be approved

Mandatory system review and compliance audit

Recurring auditor cost and compliance burden.

App-store gambling-app authorisation gating

Distribution restricted on iOS/Android.

Server-residency requirement unconfirmed

Hosting obligations may exist in COMAR Title 36; verify.

No codified RNG/RTP standard

Certification expectations unclear.

No player-protection standards

No RG framework; reputational/social risk.

Multi-factor geo-gating mandatory

Strict location-verification compliance burden.

Assuming current online technical standards are final

Standards are not yet published; requirements are forthcoming.

Server-residency requirement not confirmed

Hosting obligations unverified against full NCSLC technical standards.

Geolocation single-point dependency

Geolocation failures can halt wagering and trigger compliance issues.

Android via direct download only

Google Play distribution restricted at launch.

Hosting tied to Lottery-approved locations

Server residency constraints for vendors.

Unpublished technical standards

RNG/data-localisation specs not finalised; reassessment needed at commencement.

1.5% digital services tax (forthcoming)

Future DST may add cost to digital-service providers with national presence.

No technical compliance framework

No game certification or hosting rules for private operators.

URHH-authorised laboratory certification requirement

Pre-launch certification adds time and cost.

Assuming national online tech standards exist

None published; pending Remote Gambling Bill

Undeveloped RNG/cert regime

Self-certification creates audit risk.

RNG/game-fairness certification unspecified

Self-certification regime may shift to mandatory standards.

No online technical-standards regime yet

Any future private online standards depend on reform enactment.

Act-text hyperlinks on the official DCIR Gaming Licence (Cap 172) page currently resolve to '#' (dead links).

Impedes direct verification of the Cap 172 statutory text from the regulator's own site.

Annual independent security assessment

Recurring certification cost and failure-to-comply licence risk.

Independent testing lab approval required

Game/equipment must be lab-certified before deployment.

House rules require prior WVLC approval

Product changes need regulator sign-off before launch.

No mandated RNG / fairness audit body

Standards may be retrofitted under modernised framework, requiring re-certification.