iGaming regulatory glossary: 25 terms for licensing and due diligence
Understand 25 licensing, technical assurance, financial-crime and revenue terms with scoped primary sources and links to practical iGaming research guides.

Jump to a section
The short answer
- Connect a brand to the exact legal entity, licence, activity and destination before using a licensing label.
- Technical certification, an operating licence and permission for a particular launch answer different questions.
- AML, KYC, CDD and EDD are related concepts. Their applicable duties require a separate jurisdiction-specific assessment.
- Revenue figures need the source's definition: wagering volume, GGR, UKGC GGY and a specified NGR measure are not automatically comparable.
How to use this glossary
Use these 25 terms when reading a licence record, examining a supplier proposal or comparing published figures. The entries provide a short definition, a frequent mistake and a route to deeper evidence. They support research by commercial, compliance and investment teams; they do not determine whether a particular arrangement may launch.
Generic entries are editorial working definitions. The authority and company examples identify their own scope: UKGC guidance concerns its Great Britain regulatory remit; MGA licensing examples concern Malta's framework; FATF sets international standards implemented through local measures; GLI describes its own testing and certification services. Entain and H2 define their own measures. None establishes one worldwide licensing, AML or accounting rule.
The four groups below separate licensing and identity, technical assurance and enforcement, financial-crime terminology, and revenue measures. Read the source passage and its date before using an entry to support a business decision.
From question to defensible conclusion
How to use this glossary
1. Jurisdiction
2. Regulator
3. Legal entity
1. Jurisdiction
The territory and legal framework relevant to an activity. In gambling research, identify the destination, product and activity before choosing the controlling source. UKGC operating-licence guidance illustrates why incorporation location and the market served are separate questions.
- Common error: treating the operator's registered country as proof that it may serve customers in another market.
2. Regulator
An authority with statutory licensing, supervisory or enforcement responsibilities within its remit. UKGC's Who we regulate page describes the businesses and individuals it licenses and its role in checking licence conditions. Other authorities have different remits.
- Common error: assuming one authority covers every product, channel and territory associated with a country.
3. Legal entity
In a commercial evidence record, the identified person or organisation holding the licence or entering the contract. Record its legal name and applicable identifier. UKGC distinguishes the legal business name from declared trading names; FATF's separate Legal persons entry describes non-natural entities in its AML standards.
- Common error: substituting a brand, group name or website for the actual licence holder or contracting party.
4. Trading name
A name under which a business presents or conducts its activities, which can differ from its legal name. The UKGC register lists trading names separately and explains that businesses provide those names and domains.
- Common error: counting a trading name as a separate licensed company, or assuming the same brand always has one operating entity.
5. Operating licence
A regulatory authorisation for its holder to conduct specified gambling activities within its stated scope. The term has a formal local meaning: UKGC describes remote, non-remote and ancillary operating licences, with the appropriate combination depending on the activities.
- Common error: extending one permission to every product, channel, group company or destination without checking the licence.
6. Supplier licence
An authorisation for particular gambling-related supply activities under a jurisdiction's rules. Malta's critical gaming supply licence is one example: MGA describes the software, regulatory-record and game functions within that category. It does not establish a licence requirement for every business called a supplier.
- Common error: treating supplier authorisation as permission to contract with players or as proof that every supplied product and destination is covered.
7. B2B
Business-to-business: products or services supplied to another business. MGA uses B2B for its defined critical gaming supply licence. That regulated category is narrower than the general commercial label.
- Common error: assuming every B2B contract needs the same authorisation, or that a B2B badge resolves the parties' responsibilities.
8. B2C
Business-to-consumer: services provided to end consumers, including player-facing gambling services. MGA's B2C gaming service framework identifies the relevant service activities and separately requires approval of gaming verticals.
- Common error: assuming a commercial B2C description proves current authorisation for the brand, product or destination being examined.
9. Licence register
An authority's published record of licensees, permissions or associated status information. The UKGC business register exposes legal names, activities, licence status and declared names and domains. Fields, historical coverage and update practices differ between authorities.
- Common error: treating any name match as a complete permission check, or treating absence from one search as proof of illegality.
10. Certification
Documented conformity assessment of identified products or systems against specified requirements. GLI's service terms illustrate the limits: its report concerns the assessed materials, agreed standards and named jurisdictional scope. This is an issuer example, not a universal approval process.
- Common error: treating a testing logo or certificate as an operating licence, a guarantee of legal status, or coverage for every future product version.
11. Technical standard
A specified requirement for how a gambling product, system or related security control should operate. UKGC's remote standards distinguish aims, requirements and implementation guidance; its testing strategy describes the assurance required for different aspects.
- Common error: assuming a standard, a test report and regulatory permission are interchangeable, or that one technical requirement applies to every product.
12. Enforcement
Action by an authority to investigate or address suspected or established non-compliance. UKGC's policy distinguishes licence reviews, regulatory powers and settlements. Identify the authority, act, affected entity and procedural stage before interpreting an announcement.
- Common error: reading an investigation as a final finding, or describing a settlement, warning, penalty and criminal conviction as the same outcome.
13. Licence suspension
A decision interrupting permissions under a licence without revoking it. UKGC can suspend at the start of, during or after a review. The relevant decision determines its effect, covered activities and duration.
- Common error: treating an interim suspension as a completed finding on every allegation, or assuming the licence has been revoked.
17
named primary sources
Last editorial review: 2026-10-16. Review target: every 30 days.
Connect a brand to the exact legal entity, licence, activity and destination before using a licensing label.
Technical certification, an operating licence and permission for a particular launch answer different questions.
AML, KYC, CDD and EDD are related concepts. Their applicable duties require a separate jurisdiction-specific assessment.
14. Licence revocation
Withdrawal of a licence by its issuing authority. UKGC describes revocation following a review and a separate route for unpaid annual fees. The reason and effective date belong in the evidence record.
- Common error: treating revocation, surrender, expiry and lapse as equivalent, or assuming every revocation has the same underlying cause.
15. AML
Anti-money laundering: laws, controls and processes intended to prevent and detect the laundering of criminal proceeds. FATF sets international AML standards; the duties of an individual gambling business depend on applicable local instruments and activity.
- Common error: reducing AML to an identity upload, or assuming one gambling-sector procedure applies in every jurisdiction.
16. KYC
Know your customer: shorthand for establishing and understanding a customer's identity and relevant risk information. UKGC's POCA guidance uses the term when discussing customer knowledge and risk-based scrutiny. It is not a globally uniform standalone statutory process.
- Common error: assuming identity verification completes all due diligence, ongoing monitoring or other applicable obligations.
17. CDD
Customer due diligence: identifying and verifying customers and beneficial owners, understanding the relationship, and conducting ongoing scrutiny. FATF Recommendation 10 supplies this conceptual structure; applying it to gambling requires the relevant local scope.
- Common error: treating CDD as a one-time identity check. This glossary supplies no universal gambling threshold or list of acceptable documents.
18. EDD
Enhanced due diligence: additional information, checks and monitoring proportionate to higher identified risk or specified legal circumstances. FATF's Interpretive Note 10 describes enhanced measures; UKGC's linked guidance concerns casino operators, not every gambling business.
- Common error: treating EDD as a replacement for CDD, or treating a higher-risk classification as proof that the customer committed a crime.
19. Beneficial owner
For a legal person, the natural person or people who ultimately own or control it, including through indirect ownership or other means of control. This entry uses FATF's legal-person definition; trusts and other legal arrangements have additional, separately defined roles.
- Common error: naming a corporate shareholder as the ultimate beneficial owner, automatically treating a director as that owner, or applying a worldwide ownership percentage.
20. Source of funds
The origin of the particular money or assets used in a transaction or relationship. FATF's 2013 PEP guidance distinguishes this from overall wealth and explains why the transferring financial institution alone does not establish provenance. This entry uses that distinction, not the document's triggers as current universal obligations.
- Common error: treating the bank, card or payment service used as a complete explanation of how the money was acquired.
21. Source of wealth
How a person accumulated their overall wealth or assets. FATF's 2013 PEP guidance distinguishes this broader history from the origin of funds in a particular relationship. The conceptual distinction does not determine what checks a business must perform today.
- Common error: treating a current bank balance or the explanation for one deposit as evidence of how the person's entire wealth arose.
22. GGR
Gross gaming revenue. H2 describes its GGR measure as the amount retained by operators after winnings. Stakes less prizes is a simplified illustration for suitable products; commission, rake and supplier income require their own source definitions.
- Common error: treating GGR as total wagers or profit, or applying one product's calculation to every market series.
23. GGY
In UKGC regulatory-return guidance, gross gambling yield uses A + B - C: qualifying stakes plus other connected amounts excluding VAT, less prizes or winnings. Its promotional treatment and GB-only or specifically requested non-GB reporting scope must also be checked.
- Common error: assuming the acronym or a headline figure has a worldwide definition identical to GGR.
24. NGR
Net gaming revenue: a measure defined by the named publisher or agreement and its stated adjustments. Entain's 2025 glossary defines Sports NGR after free bets and promotional bonuses and treats other cost deductions in separately named measures.
- Common error: assuming net means profit or that all taxes, fees and operating costs have already been deducted.
25. Turnover / stakes / handle
Wagering volume before subtracting prizes. H2's turnover dataset counts stakes and wagers. Handle is another wagering-volume label; check the particular report's inclusion and timing rules rather than treating these labels as proof of identical series. Here, turnover means wagering activity, not business sales.
- Common error: substituting player deposits for wagers. The same funds can be wagered again, so recorded wagering volume can exceed the original deposit.
Use the terms in a scoped evidence review
For a supplier proposal, continue with the published B2B guide and its blank due diligence checklist. For economic figures, continue with the GGR/NGR/turnover guide. Keep a commercial supplier review separate from player CDD: a research checklist is not an AML procedure.
For a focused research request, specify the entity, activity, destinations, product or version, decision and missing evidence. Use the existing custom-research enquiry to agree the required work; this glossary promises no supplier approval or new data product.
The primary sources were checked on 16 October 2026. FATF Recommendations are the June 2026 edition; the source-of-funds and source-of-wealth distinctions come from its explicitly dated 2013 PEP guidance. The Research Desk maintains this glossary on a thirty-day target (next review: 15 November 2026) and reopens affected entries after relevant source changes. Checking a document today does not change its publication date or legal scope.
Turn the evidence into a focused research brief
Send the regulatory question, entities and markets you need reviewed. We can scope a private source review with dated evidence and explicit limits.
Markets, outputs, evidence cut-off and fee are agreed in the written scope.
Need structured records for a workflow? Explore CSV and JSON data.
Primary sources
These links are maintained by the named authority. Open the current source before relying on a status.
Operating licences: types, assessment and incorporation location
Gambling Commission · checked 16 October 2026
Who we regulate: businesses, individuals and licence conditions
Gambling Commission · checked 16 October 2026
Register of gambling businesses: About the data and field definitions
Gambling Commission · checked 16 October 2026
Glossary: Legal persons and Beneficial owner
FATF · checked 16 October 2026
Game Providers and Back Office: B2B critical gaming supply
Malta Gaming Authority · checked 16 October 2026
Remote Gaming Services: B2C gaming service and approved verticals
Malta Gaming Authority · checked 16 October 2026
General Terms and Conditions: assessment, certification and report scope
Gaming Laboratories International · checked 16 October 2026
Remote gambling and software technical standards: Introduction, sections 1.1 to 1.4
Gambling Commission · checked 16 October 2026
Testing strategy: Summary, RTS and independent assurance
Gambling Commission · checked 16 October 2026
Regulatory enforcement: reviews, settlements, suspension and revocation
Gambling Commission · checked 16 October 2026
Recommendations, updated June 2026: Introduction, Recommendation 10 and Interpretive Note 10
FATF · checked 16 October 2026
POCA guidance: Risk-based approach and KYC discussion
Gambling Commission · checked 16 October 2026
Casino guidance: enhanced customer due diligence and ongoing monitoring
Gambling Commission · checked 16 October 2026
PEP Guidance, 2013: source of wealth and source of funds, paragraphs 87 to 88, printed page 20
FATF · checked 16 October 2026
Available datasets: GGR and wagering turnover
H2 Gambling Capital · checked 16 October 2026
Reporting GGY: calculation, geographic scope and promotional treatment, updated 15 September 2026
Gambling Commission · checked 16 October 2026
Annual Report 2025: NGR and Sports NGR glossary, printed page 253
Entain plc · checked 16 October 2026