---
title: "Technical Standards across all jurisdictions — Gambling Regulatory Intelligence · Advennt"
canonical: https://advennt.io/themes/technical-standards/
source_html: /themes/technical/index.html
description: "Advennt regulatory intelligence — Technical Standards rolled up across 82 jurisdictions. Each claim traces to its country page."
generated_at: 2026-10-27T06:55:39Z
content_sha256: 53c5e9632a09d9d83b7396050169e9055a1aac4e9d68be980f22a4327b9948f9
generator: "fe-fleet/md-twin@1.0"
---
# Technical Standards across all jurisdictions — Gambling Regulatory Intelligence · Advennt

` landed in the SECOND track while the first stayed
empty, and the whole index rendered inside 1fr of a 1140px box with a dead
210px gutter. That is the "one column" the operator saw.
Fixed with a modifier on the index only, so detail pages keep 210px 1fr. */
.layout--single{grid-template-columns:minmax(0,1fr);max-width:var(--chrome-maxw,1600px)}
/* Prose still needs a readable measure -- full width is for the CARD GRID, not
for a 1600px line of text. */
.layout--single .lead{max-width:84ch}
.tx-index{display:grid;grid-template-columns:repeat(auto-fit,minmax(260px,1fr));gap:14px;margin-top:16px}
.tx-card{border:1px solid var(--line,#e5e7eb);border-radius:12px;padding:18px;text-decoration:none;color:var(--ink-1,#111);background:var(--surface,#fff)}
.tx-card:hover{border-color:var(--accent,#b45309)}
.tx-card h3{margin:0 0 6px}
.tx-card .tx-def{font-size:13px;color:var(--ink-2,#374151)}
.tx-card .tx-stat{font-size:12px;color:var(--accent,#b45309);margin-top:10px;font-weight:600}

/* T3 typography rebase (session arti-17fcf3a5) — theme-scoped, cascades last.
The shared engine CSS hardcodes -apple-system on body and declares --ui/--read
without ever loading the faces, so Satoshi silently fell back. fonts.css +
typography.css are now linked in (fonts.css supplies the self-hosted @font-face rules); this rule makes the page consume the
token it already declares. Deliberately NOT changed in the engine renderer:
build_jurisdiction_page_v3.py also builds the ~105 JID pages, so a body-font
change there is a full-reflow decision, not a theme fix. */
body{font-family:var(--ui)}

[Skip to content](#app)

# Technical Standards

Technical standards, certification, hosting and server rules, platform and equipment requirements.

Flags

151

Jurisdictions

82

Read order

Theme-major

28 further jurisdictions with flags in this theme are in expert review and not shown until published.

## Cross-jurisdiction posture cluster

151 flags across 82 jurisdictions. Posture mass: Rules 57 · Risks 35 · Reality 59.

[Colorado — State 3 ⚠](/jurisdictions/colorado/)[Indiana — State 3 ⚠](/jurisdictions/indiana/)[🇮🇩 Indonesia 2 ⚠](/jurisdictions/indonesia/)[🇧🇬 Bulgaria 5](/jurisdictions/bulgaria/)[🇦🇷 Argentina 4](/jurisdictions/argentina/)[🇩🇪 Germany 4](/jurisdictions/germany/)

## Worked examples

Each links back to the full jurisdiction page — the theme view is a projection of those country ledgers.

[Colorado — State →](/jurisdictions/colorado/) Accepting wagers from outside Colorado

Geolocation is mandatory; out-of-state wagers breach federal and state law.

3 technical standards flags on this jurisdiction · see full country page

[Indiana — State →](/jurisdictions/indiana/) Accepting wagers from outside Indiana

Geolocation is mandatory; out-of-state bets are unlawful.

3 technical standards flags on this jurisdiction · see full country page

[🇮🇩 Indonesia →](/jurisdictions/indonesia/) ITE Law Art. 27(2) criminalises gambling content

Marketing/affiliate distribution is a criminal offence.

2 technical standards flags on this jurisdiction · see full country page

## Rules · Risks · Reality across the cohort

Lens · which facet of each jurisdiction’s flags:

All Rules Risks Reality

Showing all facets.

[Colorado — State](/jurisdictions/colorado/) Critical

Accepting wagers from outside Colorado

Geolocation is mandatory; out-of-state wagers breach federal and state law.

[Indiana — State](/jurisdictions/indiana/) Critical

Accepting wagers from outside Indiana

Geolocation is mandatory; out-of-state bets are unlawful.

[🇮🇩 Indonesia](/jurisdictions/indonesia/) Critical

ITE Law Art. 27(2) criminalises gambling content

Marketing/affiliate distribution is a criminal offence.

[Alberta — Canada (province)](/jurisdictions/alberta/) High

Failure to integrate CSE via API

Mandatory precondition; non-integration blocks go-live.

[Alberta — Canada (province)](/jurisdictions/alberta/) High

Inadequate Alberta-only geolocation / VPN controls

SRIG requires enforcement of Alberta-only play with evasion controls.

[🇦🇷 Argentina](/jurisdictions/argentina/) High

Operating without a .bet.ar domain

The .bet.ar domain is mandatory and the key public marker of legality.

[🇦🇷 Argentina](/jurisdictions/argentina/) High

No RENAPER biometric verification at login/withdrawal

Federal mandate requires biometric verification at each login and before withdrawals.

[🇦🇷 Argentina](/jurisdictions/argentina/) High

No GLI-accredited RNG certification

CABA technical regulations require GLI-accredited RNG certification.

[🇦🇷 Argentina](/jurisdictions/argentina/) High

Missing geolocation controls

Geolocation is mandatory to confine the offering to province boundaries.

[Arizona — State](/jurisdictions/arizona/) High

Geolocation failure

Accepting out-of-state wagers breaches the geolocation requirement.

[Arizona — State](/jurisdictions/arizona/) High

Unapproved platform supplier

Platform/technology suppliers require ADG approval.

[🇧🇩 Bangladesh](/jurisdictions/bangladesh/) High

BTRC blocks 4,600+ sites, 447 apps, 16,000 social links

Extensive access interdiction; constant domain rotation required.

[🇧🇷 Brazil](/jurisdictions/brazil/) High

Strict data localisation

Requires Brazil-based infrastructure.

[🇧🇬 Bulgaria](/jurisdictions/bulgaria/) High

Storing data outside Bulgaria

Online betting data localisation mandate.

[🇧🇬 Bulgaria](/jurisdictions/bulgaria/) High

No NRA replication server

Required for real-time NRA reporting.

[🇧🇬 Bulgaria](/jurisdictions/bulgaria/) High

Uncertified RNG

Approved laboratory certification required.

[Canada — Ontario](/jurisdictions/ontario/) High

Serving non-Ontario players

Geolocation to Ontario required; liquidity ring-fenced.

[Canada — Ontario](/jurisdictions/ontario/) High

Uncertified games at launch

Technical certification required pre-go-live.

[🇨🇳 China (Mainland)](/jurisdictions/china/) High

Relying on claimed geo-exclusion as a defence

Great Firewall makes circumvention detectable; not a defence to Art. 303

SRC-CN-001

[🇩🇴 Dominican Republic](/jurisdictions/dominican-republic/) High

Failure to host servers domestically

Breaches a core Res. 136-2024 licence condition.

[🇫🇷 France](/jurisdictions/france/) High

No geolocation

Geolocation mandatory for FR-licensed operators.

[🇫🇷 France](/jurisdictions/france/) High

Uncertified gaming systems

Pre-launch ANJ approval required.

[🇩🇪 Germany](/jurisdictions/germany/) High

€1 max stake per spin on slots

Severely caps slot revenue per session vs offshore competitors.

[Indiana — State](/jurisdictions/indiana/) High

Uncertified wagering system

Systems must pass independent testing-lab certification.

[🇮🇩 Indonesia](/jurisdictions/indonesia/) High

Systematic IP/DNS blocking

Player access is actively interdicted.

[🇵🇰 Islamic Republic of Pakistan](/jurisdictions/pakistan/) High

Listing a gambling app for PK users

Apps are blocked and store availability is restricted.

[🇰🇿 Kazakhstan](/jurisdictions/kazakhstan/) High

Hosting betting servers outside Kazakhstan

Breaches the server-localisation licence condition.

[🇲🇾 Malaysia](/jurisdictions/malaysia/) High

Systematic ISP-level DNS blocking; ~3,200 active domain blocks

Access to offshore sites is actively and increasingly suppressed.

[Massachusetts — State](/jurisdictions/massachusetts/) High

Failure to geolocate players within Massachusetts

Wagering must occur within state boundaries.

[Michigan — State](/jurisdictions/michigan/) High

Servers outside Michigan/approved locations

Breaches MGCB technical standards and hosting requirements.

[🇲🇲 Myanmar](/jurisdictions/myanmar/) High

Funnull-type IP/hosting suppliers

OFAC sanctioned bulk IP supplier to scam sites.

[🇲🇲 Myanmar](/jurisdictions/myanmar/) High

Any local entity formation

No safe corporate vehicle; sanctions screening failure risk.

[🇳🇵 Nepal](/jurisdictions/nepal/) High

VPN/proxy access to circumvent blocks

Treated as illegal access in itself.

[Nevada — State](/jurisdictions/nevada/) High

Inadequate geolocation controls

Play must be confined to in-state players.

[Ohio — State](/jurisdictions/ohio/) High

Inadequate geolocation allowing out-of-state wagers

Players must be physically in Ohio; geofencing alone may not suffice per OCCC.

[🇵🇦 Panama](/jurisdictions/panama/) High

Uncertified RNG/software deployed

JCJ mandates third-party certification; deployment without it breaches registration.

[🇵🇭 Philippines](/jurisdictions/philippines/) High

No geolocation gating

Player must be physically in PH.

[🇰🇷 Republic of Korea (South Korea)](/jurisdictions/south-korea/) High

Content/credit supply to overseas KR-facing platforms

Captured in cross-border crackdowns.

[🇸🇦 Saudi Arabia](/jurisdictions/saudi-arabia/) High

Reliance on Saudi user access via VPN

VPN circumvention is illegal and monitored; CST blocks at the gateway.

[🇷🇸 Serbia](/jurisdictions/serbia/) High

Failing near-real-time data streaming

Operators must stream operational data and file monthly returns by the 5th.

[🇸🇰 Slovakia](/jurisdictions/slovakia/) High

Mandatory Slovak server localisation

Capex and infrastructure burden distinct from EU norms.

[🇪🇸 Spain](/jurisdictions/spain/) High

No real-time DGOJ data integration

RD 1613/2011 requires real-time monitoring integration.

[🇪🇸 Spain](/jurisdictions/spain/) High

Uncertified platform launch

Platform must be certified for functionality and security pre-launch.

[🇱🇰 Sri Lanka](/jurisdictions/sri-lanka/) High

Supplying gambling software without s.33 licence

Illegal to develop, distribute or operate gambling software without GRA licence.

[🇹🇼 Taiwan](/jurisdictions/taiwan/) High

Relying on member-only access to evade prohibition

2022 amendment closed the restricted-access loophole.

[🇹🇼 Taiwan](/jurisdictions/taiwan/) High

Lottery game manipulation

Integrity amendments criminalise interference severely.

[Tobique First Nation (Neqotkuk) — Tobique Gaming Commission](/jurisdictions/tobique-first-nation/) High

Prior published record asserted an AML and player-protection void, a fixed restricted-country list, a single-casino cap, crypto acceptance and a sole-DLAG gateway, none of which survives contact with the regulator-published text.

Downstream consumers (LRE documents, subscriber reports, jurisdiction pages) may still carry the withdrawn propositions and require re-generation.

[🇬🇧 United Kingdom](/jurisdictions/united-kingdom/) High

Unlicensed software supply

B2B software must be UKGC-licensed.

SRC-GB-001

[🇬🇧 United Kingdom](/jurisdictions/united-kingdom/) High

Uncertified RNG

GLI-19 / RTS certification required.

SRC-GB-003

[🇺🇸 United States (Federal Layer)](/jurisdictions/united-states/) High

Inadequate geolocation

Geolocation is mandatory to enforce intrastate operation.

SRC-US-002

[Virginia — State](/jurisdictions/virginia/) High

Failing geolocation enforcement

Out-of-state wagers breach § 58.1-4036.

[Virginia — State](/jurisdictions/virginia/) High

Supplying platform without supplier licence

Vendor/supplier functions require Lottery approval.

[Virginia — State](/jurisdictions/virginia/) High

No suspicious-activity detection

Operators must detect/report suspicious betting.

[Virginia — State](/jurisdictions/virginia/) High

Uncertified betting system

Systems must be certified by Lottery-approved labs.

[Washington, D.C.](/jurisdictions/district-of-columbia/) High

Fraud settlement involving core platform vendor (GambetDC contract)

Signals systemic vendor-oversight weaknesses in state/district-operated gaming infrastructure procurement.

[Alberta — Canada (province)](/jurisdictions/alberta/) Medium

Notification Matrix obligations ignored

AGLC Notification Matrix sets mandatory information, frequency and format.

[🇦🇺 Australia](/jurisdictions/australia/) Medium

Weak geolocation / customer-location verification

Required for POC tax and IGA targeting.

[🇧🇩 Bangladesh](/jurisdictions/bangladesh/) Medium

5,179 SIM cards suspended for gambling use

Telecom-layer enforcement against agents and users.

[🇧🇪 Belgium](/jurisdictions/belgium/) Medium

Domestic server localisation

Servers must be located in Belgium.

[🇧🇿 Belize](/jurisdictions/belize/) Medium

The injected T2 anchor hosted at invest.gov.bz under a filename referencing &#x27;Lotteries Control Act 152&#x27; in fact serves Gaming Control Act Cap 152 text.

File/label mismatch risks mis-citation of the wrong historical Act if not independently verified before reliance.

[🇧🇷 Brazil](/jurisdictions/brazil/) Medium

Mandatory accredited-lab certification

Certification bottleneck/cost.

[British Columbia — Canada (province)](/jurisdictions/british-columbia/) Medium

Assuming no geolocation requirement

PlayNow geolocates to BC; private access without authorisation is unlawful.

[🇧🇬 Bulgaria](/jurisdictions/bulgaria/) Medium

Unapproved software updates

NRA approval required for new versions.

[🇧🇬 Bulgaria](/jurisdictions/bulgaria/) Medium

Software not registered with Metrology Institute

Registration mandatory.

[🇰🇭 Cambodia](/jurisdictions/cambodia/) Medium

Unregistered gaming equipment/software

Equipment and software must be certified/registered with CGMC.

[Canada — Ontario](/jurisdictions/ontario/) Medium

Crypto gambling without guidance

No AGCO crypto specification yet; self-certification carries reassessment risk.

[🇨🇳 China (Mainland)](/jurisdictions/china/) Medium

VPN reliance to reach Chinese users

Active VPN crackdown; reachability still engages liability

SRC-CN-011

[🇨🇳 China (Mainland)](/jurisdictions/china/) Medium

Hosting/CDN/DNS infrastructure China-facing

Domain takedown powers (CAC/MPS) and accomplice liability

SRC-CN-011

[Colorado — State](/jurisdictions/colorado/) Medium

Weak KYC at onboarding

KYC confirming age and identity is required before wagering.

[Connecticut — State](/jurisdictions/connecticut/) Medium

Server-residency requirement unconfirmed

Hosting obligations not fully verified against Technical Standards.

[🇭🇷 Croatia](/jurisdictions/croatia/) Medium

Domestic server localisation

Infrastructure cost and operational constraint.

[Delaware — State](/jurisdictions/delaware/) Medium

Geolocation mandatory for in-state play

Out-of-state play is blocked; technical failures risk compliance.

[Delaware — State](/jurisdictions/delaware/) Medium

Hosting tied to approved locations

Server flexibility constrained by Lottery specifications.

[🇪🇬 Egypt](/jurisdictions/egypt/) Medium

Distributing gambling app via stores

App stores restrict gambling for Egypt; NTRA can order removals.

[🇪🇬 Egypt](/jurisdictions/egypt/) Medium

Reliance on VPN tolerance

VPN use tolerated generally but gambling-specific use carries legal risk.

[🇩🇪 Germany](/jurisdictions/germany/) Medium

5-second minimum spin duration

Reduces play velocity and revenue.

[🇩🇪 Germany](/jurisdictions/germany/) Medium

No autoplay / no jackpots on slots

Product feature restrictions reduce competitiveness.

[🇩🇪 Germany](/jurisdictions/germany/) Medium

LUGAS integration friction

Integration is a technical bottleneck for new entrants; operators not connected cannot operate.

[🇬🇷 Greece](/jurisdictions/greece/) Medium

Server localisation in Greece

Mandatory data-localisation increases infra cost.

[🇬🇷 Greece](/jurisdictions/greece/) Medium

Pre-launch game certification

Time-to-market delay.

[🇬🇷 Greece](/jurisdictions/greece/) Medium

Ad-platform restrictions

Google/Meta limit gambling ads to licensed.

[Indiana — State](/jurisdictions/indiana/) Medium

Failure to report suspicious wagering to integrity tip line

IGC requires integrity reporting.

[🇵🇰 Islamic Republic of Pakistan](/jurisdictions/pakistan/) Medium

Encouraging VPN circumvention of blocks

Circumvention does not legalise activity and adds exposure.

[🇯🇵 Japan](/jurisdictions/japan/) Medium

Assuming no IR technical certification

CMC requires equipment inspection and self-examination/reporting; non-compliance risks licence action.

[🇰🇪 Kenya](/jurisdictions/kenya/) Medium

GRA technical standards unpublished

RNG/data requirements not yet assessable.

[🇱🇹 Lithuania](/jurisdictions/lithuania/) Medium

Operator-funded independent platform accreditation

Adds cost and lead time to launch.

[🇲🇾 Malaysia](/jurisdictions/malaysia/) Medium

Transparent DNS proxying defeats alternative-resolver bypass

Standard DNS-change workarounds are being neutralised.

[Michigan — State](/jurisdictions/michigan/) Medium

Weak software authentication

Digest must be at least 128-bit complexity.

[Michigan — State](/jurisdictions/michigan/) Medium

Using unregistered vendors

Operators must use Board-registered vendors.

[🇲🇦 Morocco](/jurisdictions/morocco/) Medium

ANRT DPI capacity

Sophisticated interdiction infrastructure available.

[🇲🇲 Myanmar](/jurisdictions/myanmar/) Medium

VPN-routed access

VPN use technically criminal under Cybersecurity Law.

[🇳🇵 Nepal](/jurisdictions/nepal/) Medium

Missing biometric KYC/CCTV at land-based casino

Mandatory under Casino Regulations 2082.

[Nevada — State](/jurisdictions/nevada/) Medium

Hosting interactive systems outside approved locations

Approved-location hosting required under Reg 14.

[🇺🇸 New York — State](/jurisdictions/new-york/) Medium

Server-at-facility requirement

Restricts hosting flexibility (statutory).

[🇳🇬 Nigeria](/jurisdictions/nigeria/) Medium

Lack of GLI/iTech certification

Game fairness certification required

SRC-NG-004

[🇵🇦 Panama](/jurisdictions/panama/) Medium

Failing JCJ technical audit

Equipment/software subject to regulatory review.

[🇵🇭 Philippines](/jurisdictions/philippines/) Medium

Hosting servers offshore

Domestic hosting historically required.

[🇰🇷 Republic of Korea (South Korea)](/jurisdictions/south-korea/) Medium

Facilitating VPN circumvention

Access-interdiction risk.

[🇰🇷 Republic of Korea (South Korea)](/jurisdictions/south-korea/) Medium

App-store distribution of KR gambling app

Restricted availability.

[🇷🇼 Rwanda](/jurisdictions/rwanda/) Medium

Mandatory CMS connectivity

Operators must integrate with RDB monitoring; non-compliance risks licence action.

[🇸🇦 Saudi Arabia](/jurisdictions/saudi-arabia/) Medium

Hosting gambling content reachable from Saudi Arabia

CST blocks and authorities may pursue facilitation charges.

[🇷🇸 Serbia](/jurisdictions/serbia/) Medium

Non-compliant transaction equipment

2024 standards mandate compliant deposit/withdrawal devices.

[🇸🇨 Seychelles](/jurisdictions/seychelles/) Medium

Mandatory in-Seychelles hosting of player registration servers

Raises infrastructure cost and complicates multi-jurisdiction platform architectures for interactive licensees.

[🇻🇳 Socialist Republic of Vietnam](/jurisdictions/vietnam/) Medium

Reliance on VPN access to offshore sites

Access interdiction is systematic; legal protection absent.

[🇹🇼 Taiwan](/jurisdictions/taiwan/) Medium

VPN-based access circumvention

Does not cure criminality of the underlying activity.

[🇹🇿 Tanzania](/jurisdictions/tanzania/) Medium

Sports Betting Management System remote access

Mandatory operational data feed to GBT/TRA.

[🇹🇭 Thailand](/jurisdictions/thailand/) Medium

App-store/ad-platform unavailability

No distribution route for gambling apps/ads in Thailand.

[🇹🇳 Tunisia](/jurisdictions/tunisia/) Medium

Foreign-group dependency for Promosport tech (Sisal/Flutter)

Single-supplier concentration; entry only via that contract

[🇦🇪 United Arab Emirates — federal jurisdiction (GCGRA framework)](/jurisdictions/united-arab-emirates/) Medium

VPN use to mask location

VPN use voids winnings and breaches eligibility rules; geolocation strictly enforced.

[🇦🇪 United Arab Emirates — federal jurisdiction (GCGRA framework)](/jurisdictions/united-arab-emirates/) Medium

Register discrepancy vs Play971 launch

Public licensee register completeness unverified — diligence cannot rely solely on it.

[🇬🇧 United Kingdom](/jurisdictions/united-kingdom/) Medium

Sub-2.5s slot spin

RTS 14D minimum spin time breach.

SRC-GB-003

[🇻🇪 Venezuela](/jurisdictions/venezuela/) Medium

Severely degraded internet infrastructure

Service reliability and geolocation impossible to guarantee.

[🇻🇪 Venezuela](/jurisdictions/venezuela/) Medium

No enforced geolocation/RNG/RG standards

No technical safe harbour; compliance must be self-imposed.

[West Virginia — State](/jurisdictions/west-virginia/) Medium

Five bordering states

Geolocation accuracy near borders is critical; failure exposes out-of-state wagering liability.

[🇦🇹 Austria](/jurisdictions/austria/) Low

Reform-regime technical standards not yet published

Cannot pre-build to unknown specifications.

[British Columbia — Canada (province)](/jurisdictions/british-columbia/) Low

Assuming IGCO technical standards are finalised

Standards still being published post-commencement.

[🇨🇲 Cameroon](/jurisdictions/cameroon/) Low

No published RNG/geolocation standard

Technical certification expectations are unclear pending ARJ specs.

[Colorado — State](/jurisdictions/colorado/) Low

Assuming server-residency requirement absent permanently

Data-localisation module is not-yet-assessed; confirm Division standards.

[🇭🇷 Croatia](/jurisdictions/croatia/) Low

Incident-reporting SLA unverified

Compliance scope unclear.

[Delaware — State](/jurisdictions/delaware/) Low

Single platform vendor dependency

Concentration risk on RSI/Scientific Games supply.

[🇪🇨 Ecuador](/jurisdictions/ecuador/) Low

LOPDP data obligations

Personal-data processing rules apply even absent gambling-specific tech rules.

[🇪🇪 Estonia](/jurisdictions/estonia/) Low

Mandatory EMTA reporting connection

System integration is a permit precondition.

[🇮🇸 Iceland](/jurisdictions/iceland/) Low

No published certification regime for private operators

Compliance requirements undefined for any future entrants.

[Illinois — State](/jurisdictions/illinois/) Low

New reporting obligations

Annual audit + quarterly compliance reports under P.A. 103-0592.

[🇮🇪 Ireland](/jurisdictions/ireland/) Low

Assuming no future technical standards

Software-system conditions to be set; not_yet_assessed.

[🇱🇹 Lithuania](/jurisdictions/lithuania/) Low

Centralised player-data controls

Integration and data-governance obligations.

[🇲🇴 Macau SAR (Macau Special Administrative Region, China)](/jurisdictions/macau/) Low

Pre-launch DICJ game approval

Land-based equipment must be approved

[🇲🇹 Malta](/jurisdictions/malta/) Low

Mandatory system review and compliance audit

Recurring auditor cost and compliance burden.

[🇲🇹 Malta](/jurisdictions/malta/) Low

App-store gambling-app authorisation gating

Distribution restricted on iOS/Android.

[Maryland — State](/jurisdictions/maryland/) Low

Server-residency requirement unconfirmed

Hosting obligations may exist in COMAR Title 36; verify.

[🇲🇽 Mexico](/jurisdictions/mexico/) Low

No codified RNG/RTP standard

Certification expectations unclear.

[🇲🇦 Morocco](/jurisdictions/morocco/) Low

No player-protection standards

No RG framework; reputational/social risk.

[🇺🇸 New York — State](/jurisdictions/new-york/) Low

Multi-factor geo-gating mandatory

Strict location-verification compliance burden.

[🇳🇿 New Zealand](/jurisdictions/new-zealand/) Low

Assuming current online technical standards are final

Standards are not yet published; requirements are forthcoming.

[North Carolina — State](/jurisdictions/north-carolina/) Low

Server-residency requirement not confirmed

Hosting obligations unverified against full NCSLC technical standards.

[North Carolina — State](/jurisdictions/north-carolina/) Low

Geolocation single-point dependency

Geolocation failures can halt wagering and trigger compliance issues.

[Rhode Island — State](/jurisdictions/rhode-island/) Low

Android via direct download only

Google Play distribution restricted at launch.

[Rhode Island — State](/jurisdictions/rhode-island/) Low

Hosting tied to Lottery-approved locations

Server residency constraints for vendors.

[🇷🇼 Rwanda](/jurisdictions/rwanda/) Low

Unpublished technical standards

RNG/data-localisation specs not finalised; reassessment needed at commencement.

[🇷🇼 Rwanda](/jurisdictions/rwanda/) Low

1.5% digital services tax (forthcoming)

Future DST may add cost to digital-service providers with national presence.

[🇸🇳 Senegal](/jurisdictions/senegal/) Low

No technical compliance framework

No game certification or hosting rules for private operators.

[🇸🇰 Slovakia](/jurisdictions/slovakia/) Low

URHH-authorised laboratory certification requirement

Pre-launch certification adds time and cost.

[🇿🇦 South Africa](/jurisdictions/south-africa/) Low

Assuming national online tech standards exist

None published; pending Remote Gambling Bill

[🇹🇿 Tanzania](/jurisdictions/tanzania/) Low

Undeveloped RNG/cert regime

Self-certification creates audit risk.

[🇺🇬 Uganda](/jurisdictions/uganda/) Low

RNG/game-fairness certification unspecified

Self-certification regime may shift to mandatory standards.

[🇺🇾 Uruguay](/jurisdictions/uruguay/) Low

No online technical-standards regime yet

Any future private online standards depend on reform enactment.

[🇻🇺 Vanuatu](/jurisdictions/vanuatu/) Low

Act-text hyperlinks on the official DCIR Gaming Licence (Cap 172) page currently resolve to &#x27;#&#x27; (dead links).

Impedes direct verification of the Cap 172 statutory text from the regulator&#x27;s own site.

[West Virginia — State](/jurisdictions/west-virginia/) Low

Annual independent security assessment

Recurring certification cost and failure-to-comply licence risk.

[West Virginia — State](/jurisdictions/west-virginia/) Low

Independent testing lab approval required

Game/equipment must be lab-certified before deployment.

[West Virginia — State](/jurisdictions/west-virginia/) Low

House rules require prior WVLC approval

Product changes need regulator sign-off before launch.

[🇿🇲 Zambia](/jurisdictions/zambia/) Low

No mandated RNG / fairness audit body

Standards may be retrofitted under modernised framework, requiring re-certification.
