Fifty-two percent. That is the share of global iGaming gross gaming revenue — from a $94 billion total in 2024 — that originates in jurisdictions where the operator holds a locally issued remote gaming license. The remaining 48% runs through passporting arrangements, offshore sublicenses, or frameworks where enforcement exists mostly on paper. Denmark's Spillemyndigheden and Kenya's BCLB both sit on the locally-licensed side of that divide. Each issues operator-specific permits with jurisdiction-specific technical standards, tax obligations, and enforcement registers that carry real consequences. The gap between the two camps lives in the terminology.
Remote Gaming License
A permit issued by a specific national or subnational regulator authorizing an operator to offer gambling products to residents of that jurisdiction through digital channels. Not a blanket passport. Not a mutual recognition arrangement. One country, one permit, one compliance regime.
Here is where it gets interesting for anyone tracking the DGI framework specifically. The EU single market does not extend to gambling. Denmark's Spillemyndigheden issues its own remote gaming licenses under the Danish Gambling Act, and those licenses carry no weight in, say, Malta or the UK. Flutter Entertainment — the largest operator by revenue at $14,048 million for fiscal 2024 — holds separate full licenses from the UKGC, the MGA, the NJDGE, and Ontario's AGCO. Four jurisdictions, four distinct applications, four distinct sets of ongoing compliance obligations. Kenya's BCLB operates on the same principle: if you want to serve Kenyan bettors, you need a BCLB-specific license, with M-Pesa integration as a mandatory technical condition. The DGI framework follows this same logic of jurisdictional specificity. One license per market. No shortcuts.
Tier 1 Jurisdiction
A licensing jurisdiction whose regulator has demonstrated — not merely claimed — the willingness and institutional capacity to impose material financial penalties on operators that fail compliance obligations.
The distinction matters because the word "regulated" has been diluted past usefulness. Every licensing jurisdiction calls itself a regulator. The test is enforcement output. The UKGC fined Entain's Ladbrokes and Coral brands £17,000,000 in August 2022 for social responsibility and anti-money laundering failings. That is on the public record in the UKGC enforcement register. Flutter's Sky Betting and Gaming subsidiary paid £1,170,000 to the same regulator in March 2023 for similar categories of failure. Bet365's Hillside entity paid £582,120 in December 2022. Three fines, three operators, eighteen months. The UKGC, MGA, NJDGE, and AGCO Ontario carry this enforcement weight consistently across the English-speaking retail markets. Kenya's BCLB sits in the same structural camp — it has suspended multiple operators for non-compliance during the 2020–2024 renewal cycles. When an operator tells you it holds a "tier 1 license," ask: has that regulator fined anyone in the last three years? If the answer requires research, the jurisdiction probably is not tier 1.
Player Fund Segregation
The legal or regulatory requirement that customer deposits held by an operator must sit in bank accounts separate from the operator's working capital and cannot be accessed by the operator's creditors in insolvency.
This sounds like table stakes. It is not. The degree of segregation varies by jurisdiction and license tier. The UKGC publishes three tiers of player fund protection: basic, medium, and high. Basic means the operator acknowledges the obligation. High means an independent trustee holds the funds and customers are prioritized creditors. Flutter, Entain, Bet365, and DraftKings all report player fund segregation in their public disclosures. But "segregated" in a Malta MGA context carries different creditor-priority implications than "segregated" under New Jersey's NJDGE rules. The Denmark DGI framework specifies its own segregation standard. And in Kenya, BCLB-licensed operators must route deposits through M-Pesa and Airtel Money — payment rails where the mobile money provider holds the float before it reaches the operator's account. That creates a de facto segregation layer that most European frameworks do not replicate. The word is the same. The mechanism underneath it varies wildly.
RNG Certification Scope
The specific set of statistical tests, game-math verifications, and simulation parameters that a certification body actually performed — as opposed to the broader assurance the operator's marketing page implies.
OK so here is where it gets really fascinating. Gaming Laboratories International's published audit scope for Flutter includes NIST 800-22 statistical randomness tests, game math verification against paytable specifications, and RTP empirical validation across 10 million simulated rounds. That is a specific, bounded scope. It tests whether the RNG produces output statistically indistinguishable from random, and whether the paytable math checks out over a large sample. iTech Labs, which certifies Bet365, operates on a quarterly-per-deployed-game cycle with annual re-certification for the RNG seed and incident re-audit within 48 hours if a dispute is raised. These are two different audit rhythms testing overlapping but not identical things. Now read the operator's marketing page. It will say "certified fair." What it will not say is which games were in scope, which test suite was run, or whether the certificate covers the version of the game currently live. The certificate is real. The scope gap between certificate and marketing claim is also real.
Gray Market Exposure
The percentage of an operator's total revenue derived from jurisdictions where the operator does not hold a locally issued license — served instead through passporting, offshore entities, or regulatory gaps.
Operators disclose this figure with varying degrees of directness. Bet365 carries a gray market exposure of approximately 22%, serving customers in roughly 170 countries from a licensing base of UKGC, MGA, and Gibraltar permits. Entain reports 12% gray market exposure alongside its 88% regulated-markets revenue figure — both numbers in the public filings for fiscal 2024. Flutter sits at 5%. DraftKings and FanDuel operate at 0%, because both are US-centric with no offshore-facing business. These percentages are a proxy for regulatory risk concentration. An operator with 22% unregulated revenue is structurally more exposed to a sudden market closure or retrospective enforcement action than an operator at 5%. Denmark's DGI framework exists specifically to move local iGaming revenue from the gray column to the licensed column. Kenya's BCLB renewal cycles between 2020 and 2024 served the same structural purpose — operators without a current BCLB license were suspended, compressing the unlicensed share of Kenyan market volume.
Regulatory Settlement
A negotiated financial penalty between a gambling regulator and a licensed operator, resolving an investigation into compliance failures without criminal prosecution or license revocation.
The Entain enforcement action of August 2022 illustrates the anatomy. The UKGC's published Regulatory Settlement notice specified three categories of failure across the Ladbrokes and Coral brands: the operator failed to carry out sufficient customer interactions with high-risk players, failed to adequately identify customers showing signs of problem gambling, and maintained AML controls inadequate for customers with unusual deposit patterns. The settlement: £17,000,000. That is on the public record. The operator kept its license. No individual was charged. The regulatory settlement is designed to change operator behavior through financial pain without destroying the business — the regulator needs licensed operators to exist in order to maintain a regulated market. The BCLB in Kenya uses license suspension rather than graduated fines as its primary enforcement tool, which produces a different incentive structure. A £17 million fine is survivable for a £4,833 million revenue operator. A license suspension is existential for a Kenyan operator whose entire deposit flow runs through M-Pesa.
Deferred Prosecution Agreement
A binding agreement between a criminal prosecutor — not a gambling regulator — and a corporate entity, where charges are formally filed but prosecution is suspended provided the company satisfies specified conditions over a monitoring period.
This is a materially different enforcement lane from the regulatory settlement. Entain's December 2023 DPA with the UK Crown Prosecution Service cost £585,000,000. Read that figure again relative to the £17 million UKGC fine from the year before. The DPA related to the former Turkey-facing business of Headlong Limited, a subsidiary Entain had sold in 2017. The scope: conduct that predated the current compliance regime. Now cross-reference the two documents. Entain's 2024 annual report shows £4,833 million in revenue and 88% regulated-markets share. The DPA disclosure shows £585 million in penalties for conduct in a market Entain exited seven years prior. One document frames Entain as an overwhelmingly regulated operator. The other frames Entain as an entity whose historical gray-market exposure generated a criminal-prosecution-grade enforcement action. Both documents are accurate. Reading only one gives you half the picture.
Cross-Operator Deposit Cap
A centralized system, operated by or on behalf of a jurisdiction's regulator, that tracks a player's aggregate deposits across every licensed operator in that market and enforces a combined spending limit regardless of how many operator accounts the player holds.
Germany built this. The GGL — Gemeinsame Glücksspielbehörde der Länder — runs a cross-operator system that caps combined monthly deposits at €1,000 across all German-licensed operators. One player, multiple accounts, one hard ceiling. This is structurally different from an operator-level deposit limit, which only tracks spending at a single brand. Flutter's UK operation reports 47% deposit-limit adoption among its users, but that is a per-operator metric. A player who sets a £500 limit at one Flutter brand could theoretically deposit another £500 at an Entain brand. Germany's cross-operator system closes that gap. Nordic regulators — including Denmark's Spillemyndigheden — watch this model closely. Kenya does not run a cross-operator cap, but the concentration of deposit flow through M-Pesa creates a structural bottleneck where such a system could technically be implemented at the payment-rail level. The infrastructure already exists. The regulatory mandate does not.
Self-Exclusion Register
A centralized database, maintained by or on behalf of a regulator, where players register to be automatically blocked from all licensed operators in that jurisdiction for a defined period.
GAMSTOP covers every UKGC-licensed online operator. A single registration blocks deposits across all brands for a player-selected duration: six months, one year, or five years. As of late 2024, GAMSTOP carried approximately 420,000 registered users with annual registrations growing at 35%. That growth rate tells you something about both awareness and need. Germany runs OASIS, which is mandatory for all GGL-licensed operators — integration is a license condition, not an optional feature. Portugal's RSA binds all SRIJ-licensed brands through a single registration. These are binding registers. Operators cannot choose whether to participate. Compare this to jurisdictions where self-exclusion is voluntary or operator-managed — where the player must separately contact each brand. Denmark's DGI framework carries its own exclusion mechanism under Spillemyndigheden oversight. Kenya's BCLB does not currently operate a centralized register, which means exclusion is managed operator by operator. The mechanism gap between binding and voluntary is the gap between a system that works across brands and one that depends on the player's persistence.
Withholding Tax Stack
The combined layers of taxation applied at different points in the gambling transaction — typically an excise or duty on the wager itself plus a withholding tax on the payout — that compound against the bettor's effective return.
Kenya's tax framework is the clearest example of how this stacks. The BCLB regime imposes a 7.5% excise on bets plus a 20% withholding tax on winnings. These are not alternative taxes. They compound. A Kenyan bettor placing a KES 1,000 wager effectively loses KES 75 to excise before the bet resolves. If the bet wins, 20% of the net winnings is withheld before payout. This double layer compresses the bettor's expected return far below the theoretical RTP of the games or the implied probability of the sports bet. Denmark applies its own tax structure under the Gambling Act — a 20% GGR tax on the operator, which the operator absorbs rather than passing directly to the bettor as a withholding. The difference matters enormously to bettor economics. Portugal's SRIJ applies 25% on online casino GGR and 8–16% on sports betting turnover. Each jurisdiction stacks differently. The bettor sees odds. The tax stack determines what those odds actually mean in net terms.