US Multi-State iGaming Licensing: Sequencing NJ, PA, MI, and Beyond

The Federal Baseline: Wire Act, UIGEA, and State Authority

Any multi-state iGaming licensing strategy must begin with the federal legal architecture. The Federal Wire Act of 1961 prohibits interstate wagering on sports but does not, following the December 2011 Department of Justice opinion, extend to online casino games. The Unlawful Internet Gambling Enforcement Act of 2006 (UIGEA, 31 U.S.C. §§ 5361–5367) does not prohibit online gambling outright; it targets the financial transaction layer, making it unlawful for payment processors to knowingly accept transactions from unlicensed online gaming operations. The practical effect is that iGaming legality is determined entirely at the state level, and each state’s licensing regime is operationally independent.

As of the first quarter of 2026, only seven US states have operational iGaming markets. New Jersey, Pennsylvania, and Michigan are the three largest by gross gaming revenue and operator density. West Virginia and Connecticut operate smaller regulated markets. Delaware maintains a limited online offering tied to its lottery. This landscape means that a multi-state licensing sequence is, for most operators, fundamentally a decision about how to allocate finite suitability, legal, and infrastructure capital across NJ, PA, and MI before considering any emerging markets such as Ohio, where Senate Bill 197 proposes to legalize online casino gambling and internet lottery gaming for players aged 21 and over, with 99% of tax revenue directed to the state’s general fund according to reporting from May 2025.

New Jersey: The Entry-Point Case and Its Constitutional Constraint

New Jersey remains the most mature regulated online casino market in the United States, and it is typically the first state in any multi-state sequencing plan. The New Jersey Division of Gaming Enforcement (DGE) oversees online casino and sportsbook licensing. New Jersey’s online gambling framework originates in legislation passed by the New Jersey Legislature in January 2011 and subsequently refined. The DGE licenses operators, platform providers, and key employees, and it conducts the background investigations that underpin suitability determinations.

The single most operationally significant requirement in New Jersey is the constitutional server-location mandate. Because the New Jersey State Constitution permits casino gambling only in Atlantic City, the legislation authorizing online gambling specified that the computer servers operating online gambling websites must be physically located at licensed casinos in Atlantic City. This is not a licensing preference or an administrative guideline; it is a constitutional constraint. Any operator structuring its infrastructure for multi-state launch must provision Atlantic City server capacity as a precondition of NJ licensure, not as an afterthought.

The legislation specified that the computer servers operating the online gambling websites must be located at licensed casinos in Atlantic City, because the state constitution allows casino gambling only in Atlantic City.

For compliance officers, this means infrastructure due diligence in New Jersey must precede or run concurrent with the application itself. Operators without a pre-existing land-based casino partner in Atlantic City must negotiate a hosting or skin agreement with a licensed Atlantic City property before the DGE application can be operationalized. As of 2023, 23 online sportsbooks and a comparable number of online casino skins were licensed and operating in New Jersey, reflecting the depth of the market but also the competitive density that new entrants must navigate.

Pennsylvania: Four License Categories and Their Operational Divergence

Pennsylvania is the second-largest US iGaming market by revenue and the most structurally complex of the three primary states for multi-state applicants. The Pennsylvania Gaming Control Board (PGCB) has authorized four categories of casino licenses, each with materially different asset caps and operational rights that directly affect online gaming eligibility.

Category 1 licenses apply to horse race track casinos, commonly referred to as racinos. Category 2 licenses cover stand-alone casinos. Category 3 licenses apply to resort casinos. Category 4 licenses, the most recent addition, authorize existing operators to establish satellite casinos as smaller secondary locations. The Gaming Control Board’s framework mandates that Category 1 and Category 2 licensees may operate up to 5,000 slot machines, while Category 3 resort casinos are capped at 600 machines. Table game permissions also diverge: Category 1 and Category 2 operators may hold up to 250 table games, while Category 3 operators are limited to a maximum of 50 table games.

For online gaming specifically, the relevant regulatory chapters in the Pennsylvania Code are Chapters 1402a through 1411a, which govern sports wagering operators (Chapter 1402a), manufacturers (Chapter 1403a), suppliers (Chapter 1404a), gaming service providers (Chapter 1405a), principals and key and nongaming employees (Chapter 1406a), testing and controls (Chapter 1407a), accounting and internal controls (Chapter 1408a), advertising, promotions, and tournaments (Chapter 1409a), compulsive and problem gambling requirements (Chapter 1410a), and self-excluded persons (Chapter 1411a). This chapter structure closely mirrors the functional compliance obligations an operator must satisfy before going live in Pennsylvania, and each chapter represents a discrete workstream in the pre-launch compliance program.

An operator entering Pennsylvania after New Jersey should note that while the PGCB and DGE share general regulatory philosophy around suitability and consumer protection, the PGCB’s chapter-by-chapter regulatory architecture requires separate documentation, testing submissions, and responsible gambling program certifications that cannot simply be recycled from New Jersey submissions without adaptation.

Suitability Investigations: The Living-System Standard

The most underestimated timeline driver in US multi-state licensing is suitability investigation. David Rebuck, former assistant attorney general and director of the New Jersey DGE, has articulated the prevailing regulatory philosophy clearly: regulation is a living system, not a point-in-time gate. Writing in April 2026, Rebuck described the continuous-vigilance model that characterizes leading US state regulatory regimes.

Independent testing, ongoing audits, and real-world validation of compliance systems should not be viewed as burdens; they are essential tools for ensuring that regulatory frameworks function as intended. This is particularly true in areas that form the backbone of modern digital gaming oversight: identity verification, fraud prevention, cybersecurity defenses, responsible gaming safeguards, anti-money laundering (AML) and suspicious activity monitoring, game integrity protections, and location compliance.

In practice, this means that the suitability investigations conducted by state gaming regulators for principals and key employees are not resolved at the point of license grant. Operators entering NJ, PA, or MI must plan for ongoing audit obligations, continuous AML and suspicious activity monitoring, and periodic re-verification of principals whose circumstances may change after initial licensure. Any change of control, material new investor, or senior executive appointment can trigger re-investigation under the relevant state’s licensing codes.

For multi-state applicants, the sequencing implication is significant. Completing a thorough NJ DGE investigation first produces a documented suitability record that other state regulators may review, but it does not constitute a reciprocal license or a formal pre-clearance. Each state conducts its own investigation. However, the quality and depth of the initial NJ investigation can accelerate subsequent PA and MI reviews if the operator maintains organized, audit-ready records of all principals, beneficial owners, and key employee backgrounds. Compliance officers should treat the first state’s suitability package as the master template and maintain it as a living document updated whenever personnel or ownership structures change.

Account-System Architecture and Cross-State Eligibility

One of the less-discussed but operationally critical dimensions of multi-state licensing is account-system architecture. Several major operators have deployed shared account systems across state lines. BetMGM, for example, operates a shared account system across its Pennsylvania and New Jersey skins, meaning that a player who has registered and claimed a welcome bonus under the BetMGM brand in New Jersey is not eligible for a second welcome offer at BetMGM Pennsylvania. According to a May 2026 consumer-facing guide covering Pennsylvania online casino bonuses, players who have already claimed a welcome bonus at a specific brand in another state are not eligible for a second welcome offer at that same brand in Pennsylvania, and verification of prior claims occurs both at the time of registration and again before any withdrawal is processed.

For compliance officers, this operational reality has several regulatory dimensions. First, the account-system architecture must be disclosed to and approved by each state’s regulator. Second, the identity verification and prior-claim-checking logic must be technically validated as part of the platform certification process in each state. Third, the responsible gambling cross-state self-exclusion obligations must be engineered into the shared account system: a player self-excluded in New Jersey who shares an account identifier with a Pennsylvania skin presents a compliance risk if the system does not propagate the exclusion across state boundaries. The Pennsylvania Code, Chapter 1411a (Sports Wagering Self-Excluded Persons), establishes the self-exclusion framework for sports wagering in Pennsylvania, and equivalent provisions apply to interactive gaming.

Capital and Operating-Cost Sequencing

The financial case for sequencing NJ before PA before MI rests on market maturity and infrastructure reuse, but compliance officers should resist oversimplifying the cost structure. As noted in industry analysis of supplier economics in Q1 2026, new regulated markets bring local licensing requirements, tighter compliance demands, and higher operating costs before revenues have fully scaled. This observation applies with equal force to operators: each additional state license requires dedicated legal fees, suitability investigation costs, platform certification and testing fees, responsible gambling program buildout, and ongoing audit overhead.

In practice, operators should model the multi-state licensing program as a sequence of overlapping workstreams rather than a purely serial process. The NJ application and infrastructure buildout can proceed in parallel with the legal entity structuring and beneficial-ownership documentation that will be required by PA and MI. The PA suitability submission can begin once the NJ submission is filed, using the same principal and key-employee background files. The technical platform certification in PA, governed by Pennsylvania Code Chapter 1407a (Sports Wagering Testing and Controls), will require independent testing laboratory engagement regardless of what has been certified in NJ, because each state maintains its own approved testing laboratory list and technical standards.

Operators should also account for the land-based partnership or market-access costs that are embedded in the US regulatory model. In New Jersey, the Atlantic City server-location requirement means that every online operator must have a contractual relationship with an Atlantic City casino licensee. These market-access agreements carry financial terms that must be factored into the NJ cost model before the application is filed. Similar market-access or partnership structures may apply in other states depending on their enabling legislation.

Emerging Markets: Ohio and the Horizon Beyond Seven States

Ohio Senate Bill 197, reported in May 2025 as under active legislative debate, would legalize online casino gambling and internet lottery gaming in Ohio for players aged 21 and over. The bill’s proposed tax allocation structure directs 99% of online gambling tax revenue to Ohio’s general fund, with 1% allocated to problem gambling programs. If enacted, Ohio would represent a significant expansion opportunity given its population size and proximity to both Pennsylvania and Michigan.

For operators already licensed in NJ and PA, an Ohio license would add a third adjacent market. Compliance officers planning for Ohio entry should monitor the enabling legislation carefully, because the regulatory structure, including which state agency will oversee online casino licensing and what the suitability and technical certification requirements will be, will not be defined until the legislation passes and the relevant agency promulgates rules. In August 2025, all 50 state attorneys general signed a letter calling on the US Attorney General to address illegal offshore gaming operations, a development that signals sustained political attention to the integrity of regulated online markets and may accelerate the legislative process in states like Ohio where the regulated alternative to offshore play is the principal policy argument for legalization.

Compliance officers should also note that the broader US expansion trajectory remains uneven. According to industry analysis from early 2026, US state expansion has slowed even as existing markets continue to grow. New York, which borders both New Jersey and Pennsylvania, does not currently have a legal online casino market as of 2026, despite having the largest sports betting handle in the country. The absence of New York from the operational iGaming map materially constrains the addressable multi-state opportunity for any operator whose natural geographic expansion would otherwise include the New York metro area.

Sequencing Recommendations for Compliance Officers

In practice, operators should structure their multi-state licensing sequence around three core principles. First, lead with New Jersey because it offers the most mature regulatory precedent, the deepest operator and vendor ecosystem, and the suitability investigation record that will inform subsequent state applications. The Atlantic City server-location requirement means infrastructure decisions must be made before the NJ application is filed, so the compliance officer’s first task is confirming the Atlantic City partnership structure.

Second, file Pennsylvania in parallel with or immediately after the NJ application, not sequentially after NJ goes live. The PGCB suitability process is independent and takes its own time. Beginning it early, using the master principal and key-employee suitability package built for NJ, compresses the overall timeline. The Pennsylvania Code’s chapter structure (1402a through 1411a) provides a clear checklist of the compliance workstreams that must be completed before go-live, and each chapter should be assigned a named workstream owner within the compliance function.

Third, treat account-system architecture and self-exclusion propagation as multi-state compliance obligations from day one, not as state-by-state add-ons. The BetMGM NJ/PA shared account system illustrates both the efficiency gains and the compliance obligations that come with cross-state account linkage. Any operator planning shared systems must engage each state regulator early on the technical architecture and ensure that identity verification, self-exclusion, and prior bonus-claim logic are certified in each jurisdiction before launch.

Operators should consult qualified legal counsel licensed in each relevant jurisdiction before filing any state application. The regulatory requirements described here reflect primary-source materials available as of the date of this article and are subject to change as state legislatures and gaming control boards update their rules.

Key Resources

New Jersey Division of Gaming Enforcement : Online gambling regulatory framework, Atlantic City server-location requirement, sportsbook licensing: nj.gov/oag/ge

Pennsylvania Gaming Control Board : Casino license categories (Categories 1 through 4), machine and table-game caps, interactive gaming regulatory framework: gamingcontrolboard.pa.gov

Pennsylvania Code, Chapters 1402a–1411a : Sports wagering operators, manufacturers, suppliers, service providers, principals and key employees, testing and controls, accounting and internal controls, advertising and promotions, compulsive gambling requirements, self-excluded persons: pacodeandbulletin.gov

Unlawful Internet Gambling Enforcement Act of 2006 (UIGEA) : 31 U.S.C. §§ 5361–5367: govinfo.gov

David Rebuck, “A Defining Moment for US State and Tribal Gaming Regulators” : iGB, April 2026: continuous-vigilance model, suitability investigation principles, AML and identity verification obligations.