Skip to main content
All insights
Methodology10 minute read

iGaming regulatory glossary: 25 terms for licensing and due diligence

Understand 25 licensing, technical assurance, financial-crime and revenue terms with scoped primary sources and links to practical iGaming research guides.

Published 16 October 2026 · Updated 16 October 2026
By iGaming Atlas Research Desk17 primary sourcesReview cadence: 30 days
iGaming Atlas glossary connecting licensing, technical assurance, financial-crime concepts and revenue terminology
Jump to a section

The short answer

  • Connect a brand to the exact legal entity, licence, activity and destination before using a licensing label.
  • Technical certification, an operating licence and permission for a particular launch answer different questions.
  • AML, KYC, CDD and EDD are related concepts. Their applicable duties require a separate jurisdiction-specific assessment.
  • Revenue figures need the source's definition: wagering volume, GGR, UKGC GGY and a specified NGR measure are not automatically comparable.

How to use this glossary

Use these 25 terms when reading a licence record, examining a supplier proposal or comparing published figures. The entries provide a short definition, a frequent mistake and a route to deeper evidence. They support research by commercial, compliance and investment teams; they do not determine whether a particular arrangement may launch.

Generic entries are editorial working definitions. The authority and company examples identify their own scope: UKGC guidance concerns its Great Britain regulatory remit; MGA licensing examples concern Malta's framework; FATF sets international standards implemented through local measures; GLI describes its own testing and certification services. Entain and H2 define their own measures. None establishes one worldwide licensing, AML or accounting rule.

The four groups below separate licensing and identity, technical assurance and enforcement, financial-crime terminology, and revenue measures. Read the source passage and its date before using an entry to support a business decision.

Evidence path

From question to defensible conclusion

1

How to use this glossary

2

1. Jurisdiction

3

2. Regulator

4

3. Legal entity

Each step must preserve the jurisdiction, product, entity, source and review date.

1. Jurisdiction

The territory and legal framework relevant to an activity. In gambling research, identify the destination, product and activity before choosing the controlling source. UKGC operating-licence guidance illustrates why incorporation location and the market served are separate questions.

  • Common error: treating the operator's registered country as proof that it may serve customers in another market.

2. Regulator

An authority with statutory licensing, supervisory or enforcement responsibilities within its remit. UKGC's Who we regulate page describes the businesses and individuals it licenses and its role in checking licence conditions. Other authorities have different remits.

  • Common error: assuming one authority covers every product, channel and territory associated with a country.

4. Trading name

A name under which a business presents or conducts its activities, which can differ from its legal name. The UKGC register lists trading names separately and explains that businesses provide those names and domains.

  • Common error: counting a trading name as a separate licensed company, or assuming the same brand always has one operating entity.

5. Operating licence

A regulatory authorisation for its holder to conduct specified gambling activities within its stated scope. The term has a formal local meaning: UKGC describes remote, non-remote and ancillary operating licences, with the appropriate combination depending on the activities.

  • Common error: extending one permission to every product, channel, group company or destination without checking the licence.

6. Supplier licence

An authorisation for particular gambling-related supply activities under a jurisdiction's rules. Malta's critical gaming supply licence is one example: MGA describes the software, regulatory-record and game functions within that category. It does not establish a licence requirement for every business called a supplier.

  • Common error: treating supplier authorisation as permission to contract with players or as proof that every supplied product and destination is covered.

7. B2B

Business-to-business: products or services supplied to another business. MGA uses B2B for its defined critical gaming supply licence. That regulated category is narrower than the general commercial label.

  • Common error: assuming every B2B contract needs the same authorisation, or that a B2B badge resolves the parties' responsibilities.

8. B2C

Business-to-consumer: services provided to end consumers, including player-facing gambling services. MGA's B2C gaming service framework identifies the relevant service activities and separately requires approval of gaming verticals.

  • Common error: assuming a commercial B2C description proves current authorisation for the brand, product or destination being examined.

9. Licence register

An authority's published record of licensees, permissions or associated status information. The UKGC business register exposes legal names, activities, licence status and declared names and domains. Fields, historical coverage and update practices differ between authorities.

  • Common error: treating any name match as a complete permission check, or treating absence from one search as proof of illegality.

10. Certification

Documented conformity assessment of identified products or systems against specified requirements. GLI's service terms illustrate the limits: its report concerns the assessed materials, agreed standards and named jurisdictional scope. This is an issuer example, not a universal approval process.

  • Common error: treating a testing logo or certificate as an operating licence, a guarantee of legal status, or coverage for every future product version.

11. Technical standard

A specified requirement for how a gambling product, system or related security control should operate. UKGC's remote standards distinguish aims, requirements and implementation guidance; its testing strategy describes the assurance required for different aspects.

  • Common error: assuming a standard, a test report and regulatory permission are interchangeable, or that one technical requirement applies to every product.

12. Enforcement

Action by an authority to investigate or address suspected or established non-compliance. UKGC's policy distinguishes licence reviews, regulatory powers and settlements. Identify the authority, act, affected entity and procedural stage before interpreting an announcement.

  • Common error: reading an investigation as a final finding, or describing a settlement, warning, penalty and criminal conviction as the same outcome.

13. Licence suspension

A decision interrupting permissions under a licence without revoking it. UKGC can suspend at the start of, during or after a review. The relevant decision determines its effect, covered activities and duration.

  • Common error: treating an interim suspension as a completed finding on every allegation, or assuming the licence has been revoked.
Evidence summary

17

named primary sources

Last editorial review: 2026-10-16. Review target: every 30 days.

Connect a brand to the exact legal entity, licence, activity and destination before using a licensing label.

Technical certification, an operating licence and permission for a particular launch answer different questions.

AML, KYC, CDD and EDD are related concepts. Their applicable duties require a separate jurisdiction-specific assessment.

The visual summary does not replace the linked regulator records below.

14. Licence revocation

Withdrawal of a licence by its issuing authority. UKGC describes revocation following a review and a separate route for unpaid annual fees. The reason and effective date belong in the evidence record.

  • Common error: treating revocation, surrender, expiry and lapse as equivalent, or assuming every revocation has the same underlying cause.

15. AML

Anti-money laundering: laws, controls and processes intended to prevent and detect the laundering of criminal proceeds. FATF sets international AML standards; the duties of an individual gambling business depend on applicable local instruments and activity.

  • Common error: reducing AML to an identity upload, or assuming one gambling-sector procedure applies in every jurisdiction.

16. KYC

Know your customer: shorthand for establishing and understanding a customer's identity and relevant risk information. UKGC's POCA guidance uses the term when discussing customer knowledge and risk-based scrutiny. It is not a globally uniform standalone statutory process.

  • Common error: assuming identity verification completes all due diligence, ongoing monitoring or other applicable obligations.

17. CDD

Customer due diligence: identifying and verifying customers and beneficial owners, understanding the relationship, and conducting ongoing scrutiny. FATF Recommendation 10 supplies this conceptual structure; applying it to gambling requires the relevant local scope.

  • Common error: treating CDD as a one-time identity check. This glossary supplies no universal gambling threshold or list of acceptable documents.

18. EDD

Enhanced due diligence: additional information, checks and monitoring proportionate to higher identified risk or specified legal circumstances. FATF's Interpretive Note 10 describes enhanced measures; UKGC's linked guidance concerns casino operators, not every gambling business.

  • Common error: treating EDD as a replacement for CDD, or treating a higher-risk classification as proof that the customer committed a crime.

19. Beneficial owner

For a legal person, the natural person or people who ultimately own or control it, including through indirect ownership or other means of control. This entry uses FATF's legal-person definition; trusts and other legal arrangements have additional, separately defined roles.

  • Common error: naming a corporate shareholder as the ultimate beneficial owner, automatically treating a director as that owner, or applying a worldwide ownership percentage.

20. Source of funds

The origin of the particular money or assets used in a transaction or relationship. FATF's 2013 PEP guidance distinguishes this from overall wealth and explains why the transferring financial institution alone does not establish provenance. This entry uses that distinction, not the document's triggers as current universal obligations.

  • Common error: treating the bank, card or payment service used as a complete explanation of how the money was acquired.

21. Source of wealth

How a person accumulated their overall wealth or assets. FATF's 2013 PEP guidance distinguishes this broader history from the origin of funds in a particular relationship. The conceptual distinction does not determine what checks a business must perform today.

  • Common error: treating a current bank balance or the explanation for one deposit as evidence of how the person's entire wealth arose.

22. GGR

Gross gaming revenue. H2 describes its GGR measure as the amount retained by operators after winnings. Stakes less prizes is a simplified illustration for suitable products; commission, rake and supplier income require their own source definitions.

  • Common error: treating GGR as total wagers or profit, or applying one product's calculation to every market series.

23. GGY

In UKGC regulatory-return guidance, gross gambling yield uses A + B - C: qualifying stakes plus other connected amounts excluding VAT, less prizes or winnings. Its promotional treatment and GB-only or specifically requested non-GB reporting scope must also be checked.

  • Common error: assuming the acronym or a headline figure has a worldwide definition identical to GGR.

24. NGR

Net gaming revenue: a measure defined by the named publisher or agreement and its stated adjustments. Entain's 2025 glossary defines Sports NGR after free bets and promotional bonuses and treats other cost deductions in separately named measures.

  • Common error: assuming net means profit or that all taxes, fees and operating costs have already been deducted.

25. Turnover / stakes / handle

Wagering volume before subtracting prizes. H2's turnover dataset counts stakes and wagers. Handle is another wagering-volume label; check the particular report's inclusion and timing rules rather than treating these labels as proof of identical series. Here, turnover means wagering activity, not business sales.

  • Common error: substituting player deposits for wagers. The same funds can be wagered again, so recorded wagering volume can exceed the original deposit.

Use the terms in a scoped evidence review

For a supplier proposal, continue with the published B2B guide and its blank due diligence checklist. For economic figures, continue with the GGR/NGR/turnover guide. Keep a commercial supplier review separate from player CDD: a research checklist is not an AML procedure.

For a focused research request, specify the entity, activity, destinations, product or version, decision and missing evidence. Use the existing custom-research enquiry to agree the required work; this glossary promises no supplier approval or new data product.

The primary sources were checked on 16 October 2026. FATF Recommendations are the June 2026 edition; the source-of-funds and source-of-wealth distinctions come from its explicitly dated 2013 PEP guidance. The Research Desk maintains this glossary on a thirty-day target (next review: 15 November 2026) and reopens affected entries after relevant source changes. Checking a document today does not change its publication date or legal scope.

Turn the evidence into a focused research brief

Send the regulatory question, entities and markets you need reviewed. We can scope a private source review with dated evidence and explicit limits.

Markets, outputs, evidence cut-off and fee are agreed in the written scope.

Need structured records for a workflow? Explore CSV and JSON data.

Primary sources

These links are maintained by the named authority. Open the current source before relying on a status.

Operating licences: types, assessment and incorporation location

Gambling Commission · checked 16 October 2026

Who we regulate: businesses, individuals and licence conditions

Gambling Commission · checked 16 October 2026

Register of gambling businesses: About the data and field definitions

Gambling Commission · checked 16 October 2026

Glossary: Legal persons and Beneficial owner

FATF · checked 16 October 2026

Game Providers and Back Office: B2B critical gaming supply

Malta Gaming Authority · checked 16 October 2026

Remote Gaming Services: B2C gaming service and approved verticals

Malta Gaming Authority · checked 16 October 2026

General Terms and Conditions: assessment, certification and report scope

Gaming Laboratories International · checked 16 October 2026

Remote gambling and software technical standards: Introduction, sections 1.1 to 1.4

Gambling Commission · checked 16 October 2026

Testing strategy: Summary, RTS and independent assurance

Gambling Commission · checked 16 October 2026

Regulatory enforcement: reviews, settlements, suspension and revocation

Gambling Commission · checked 16 October 2026

Recommendations, updated June 2026: Introduction, Recommendation 10 and Interpretive Note 10

FATF · checked 16 October 2026

POCA guidance: Risk-based approach and KYC discussion

Gambling Commission · checked 16 October 2026

Casino guidance: enhanced customer due diligence and ongoing monitoring

Gambling Commission · checked 16 October 2026

PEP Guidance, 2013: source of wealth and source of funds, paragraphs 87 to 88, printed page 20

FATF · checked 16 October 2026

Available datasets: GGR and wagering turnover

H2 Gambling Capital · checked 16 October 2026

Reporting GGY: calculation, geographic scope and promotional treatment, updated 15 September 2026

Gambling Commission · checked 16 October 2026

Annual Report 2025: NGR and Sports NGR glossary, printed page 253

Entain plc · checked 16 October 2026