Betty Gaming ordered to pay C$120,000 after 23 underage users opened Ontario accounts

Ontario's Alcohol and Gaming Commission ordered monetary penalties totaling C$120,000 against Betty Gaming after underage users were able to create accounts on its online-gambling platform. The regulator announced the orders on 6 August 2026.

The headline number needs to be split carefully. AGCO says nine people under 19 created accounts, deposited funds and gambled. Another 14 underage users opened accounts but did not make a deposit. In total, 23 accounts passed far enough through registration to trigger the enforcement case, but only nine are reported to have reached gambling activity.

The official release says Betty Gaming identified a vulnerability and that AGCO was notified in November 2025. It does not publish the technical detail of the weakness, the precise period during which it was available or the individual circumstances of the people who used it.

That absence matters for both accuracy and prevention. The regulatory finding establishes that age controls failed in specific cases; it does not reveal whether the cause was document handling, identity matching, a registration path or another system component. Any more specific explanation would go beyond the record.

Ontario generally requires a person to be at least 19 to gamble online in the regulated market. The province has a narrow distinction for lottery products: lottery tickets can be purchased online from age 18. That exception does not turn 18 into a general casino or sports-betting age.

AGCO connected the Betty orders to Standard 3.01 requirement 1(a), which concerns controls to prevent ineligible individuals from participating, and Standard 3.04, which requires age and identity verification. The enforcement message is therefore about the gate at account creation and the controls that should stop funding and play.

An account that is opened but never funded is still a control failure. An account that proceeds to a deposit and gambling activity exposes a second problem: the user has passed several operational checkpoints without being stopped. The nine funded accounts are why this case extends beyond a registration defect.

The public release does not state how much was deposited, wagered or lost. It also does not identify the games or sites involved. Reporting unknown monetary harm as a fact would exaggerate the evidence; the confirmed point is that those nine users deposited and gambled before the issue was addressed.

The total ordered amount is C$120,000. Betty said it accepts AGCO's findings and the penalty. The company also said it closed the affected accounts and introduced additional safeguards intended to strengthen player-eligibility checks.

That response closes the earlier uncertainty about whether Betty would contest the orders. It does not turn the regulatory findings into criminal convictions, identify the affected users or reveal how the vulnerability worked. Those factual limits remain.

The practical question is not whether a platform displays an age declaration. It is whether an ineligible user can move through registration, verification, deposit and play. Operators need tests that cover alternate journeys, data mismatches and changes introduced during product or identity-service updates.

The next useful update would be an AGCO compliance finding or a technical disclosure explaining the vulnerability and the controls added after it was found. For now, the defensible account is clear: 23 underage accounts, nine with deposits and gambling, 14 without deposits, a C$120,000 penalty and an operator that says it accepts the outcome.

That sequence also gives compliance teams a practical test case: registration, funding and play should be examined as separate gates, because stopping a later step does not repair an earlier eligibility failure.