Alberta iGaming Compliance Guide 2026: AGLC, AiGC, SRIG Standards, and Operator Obligations

Alberta’s regulated iGaming market opens on July 13, 2026, under a governance architecture that differs from Ontario’s in ways that will catch operators off guard if they do not prepare for both tracks simultaneously. AGLC registers and regulates, the Alberta iGaming Corporation (AiGC) contracts commercially and manages financials. Both processes must be completed before a registered operator can lawfully accept a single bet from an Alberta player. This guide is a complete compliance reference anchored in the AGLC Standards and Requirements for Internet Gaming (SRIG), issued January 14, 2026 (Sections 1 through 4) and February 5, 2026 (Section 5), alongside the enabling iGaming Alberta Act and the Personal Information Protection Act (Alberta).

The AGLC/AiGC Dual Structure: Why the Distinction Matters

The most consequential structural feature of Alberta’s iGaming framework is the formal separation of regulatory and commercial functions across two distinct bodies. Compliance teams that treat this as administrative detail risk triggering parallel compliance failures before launch.

AGLC (Alberta Gaming, Liquor and Cannabis Commission) is the provincial regulator. It issues registrations, sets and enforces technical and social responsibility standards through the SRIG, conducts background checks, manages the centralized self-exclusion system, and holds enforcement powers including suspension and cancellation of registrations. Every obligation in the SRIG runs through AGLC.

AiGC (Alberta iGaming Corporation) is a Crown corporation that conducts and manages the iGaming lottery scheme on behalf of the Province. AiGC is responsible for commercial agreements with registered operators, anti-money laundering oversight, public complaints administration, and financial reporting. Operators do not go live until they have both an AGLC registration and a signed commercial agreement with AiGC.

SRIG Section 2.3.1 states that registered operators must enter into a commercial agreement with Alberta’s iGaming Corporation (AiGC) or the Commission in order to provide or operate an iGaming site named on their registration. This agreement is a precondition to operation, not a parallel administrative task.

Operators familiar with Ontario’s framework will recognise the structural parallel: AGLC maps roughly to AGCO, and AiGC maps to iGaming Ontario (iGO). However, the provincial statutes, fee schedules, technical standards, and responsible gambling obligations are jurisdiction-specific. Operators must not import assumptions from Ontario’s regime into Alberta without independent verification. For a detailed comparison of the two Canadian frameworks, see the Ontario iGaming compliance guide.

Legal Foundation and Registration Framework

Alberta’s iGaming market rests on two pieces of enabling legislation: the iGaming Alberta Act (Bill 48) and the Gaming, Liquor and Cannabis Act (Alberta). The SRIG derives its binding authority from both statutes. Registered operators and registered Goods or Services Suppliers must cease all unregulated gaming activities in Alberta’s iGaming market once registration is required under either statute. Compliance with the SRIG is not optional for any entity providing services to Alberta players through the regulated scheme.

Registration Categories

The SRIG establishes two primary registration categories. Registered Operators are entities that provide or operate an iGaming site in Alberta under a commercial agreement with AiGC. Registered Goods or Services Suppliers provide goods or services that support gaming operations. This category covers platform providers, game studios, payment processors, RNG suppliers, and accredited testing facilities (ATFs).

No supplier registration is issued unless the applicant has complied with all federal, provincial and municipal legislation and applicable permits, paid the applicable non-refundable fees, and satisfied Board policies. The Board may register an applicant if it considers registration appropriate, the applicant is eligible, and the requirements under the Gaming, Liquor and Cannabis Act have been met.

The Three-Pronged Approach to Registration

AGLC applies a three-track process that operators and suppliers must work through concurrently. The first track is due diligence, covering background checks, suitability assessment, and eligibility determination. The second track is compliance, covering the SRIG obligations, go-live readiness documentation, Control Activity Matrix (CAM) submission, and technology compliance confirmation. The third track is integration with AGLC’s centralized Self-Exclusion Program via API. All three tracks must be complete before any gaming site can go live.

What Are the Fees to Register as an Alberta iGaming Operator?

Operator registration fees are fixed and non-refundable: a CAD $50,000 application fee and a CAD $150,000 annual registration fee. Goods or Services Suppliers pay annual registration fees but, as of the SRIG’s publication, do not face an application fee. Bede Gaming was confirmed as one of the first international platform providers to receive conditional one-year supplier approval in March 2026, according to reporting at that time. All fees are paid to AGLC and are separate from any commercial terms negotiated with AiGC.

Background Checks and Suitability Standards

AGLC applies a stringent suitability test to applicants and their associates. Registration will be refused if any person connected to the applicant has not acted or may not act in accordance with the law, with honesty and integrity, or in the public interest, having regard to past conduct. AGLC will also refuse registration where an associate’s background, reputation, or associations may result in adverse publicity for the gaming industry in Alberta.

Specific disqualifying factors include a contravention of the Gaming, Liquor and Cannabis Act or its predecessors within the five years prior to application, failure to pass a records check under section 10(2) of the Gaming, Liquor and Cannabis Regulation, or a prior cancellation or suspension of a licence or registration under the Act or a foreign equivalent within the five years preceding application. Applicants must immediately notify AGLC if any officer, shareholder, director or owner is charged with or convicted of offences under the Criminal Code (Canada), Excise Act, Food and Drug Act, or Income Tax Act (Canada).

Technical Standards: RNG, Certification, and IT Security

Accredited Testing Facility Certification

All games, random number generators (RNGs), and components of iGaming systems that accept, process, determine outcomes, display and log player bet details must be certified by an Accredited Testing Facility (ATF) registered with AGLC. The certification requirement extends to slot games, table games, sports and event betting systems, poker, card games, and all live dealer technology including physical wheels (roulette), physical dice tables, and card shufflers with electronic components. Technology must be certified before deployment in the Alberta market. The only exception is the Regulatory Fix procedure: corrected technology may be deployed immediately but must be submitted to an ATF for Alberta certification within five business days of release.

ATF certifications must only be issued by ATFs registered by AGLC, must not contain any limitation on AGLC’s use of the certification, and may not be issued contingent on future modifications. An ATF may issue a certification specifying features that must be disabled for the technology to be compliant. ATFs must add AGLC’s Standards and Requirements for Internet Gaming to the scope of their ISO accreditation within one year of being registered as an iGaming Goods or Services Supplier in Alberta.

Re-certification is required when any modification or subsequent discovery of an undetected issue materially impacts gaming system integrity, fairness, security, or compliance with the SRIG. Records of testing and ATF certification must be retained and provided to AGLC on request.

Audit Logging and Record Retention

The SRIG imposes precise logging and retention obligations that translate directly into infrastructure requirements. Continuous logs must be maintained for all critical gaming systems, covering financial accounting and game state history. Those logs must be protected against alteration using WORM/immutability controls or cryptographic signing with SHA-256, transmitted and stored over TLS 1.2 or higher. Access to logs must be role-based, with segregation of duties between operations and monitoring functions. Logs must be retained for a minimum of three years, with event and security logs retained for at least one year online and seven years in archive.

AGLC has the right to access these logs on request and must be able to monitor and participate in games via police or inspector access. Records related to risk profiling and interventions, including manual adjustments to player risk scores, must also be maintained to demonstrate compliance.

IT Architecture and Security Requirements (Section 5, issued February 5, 2026)

Section 5 of the SRIG, issued under separate authority on February 5, 2026, sets out binding IT security requirements that compliance teams must treat as a distinct compliance layer from the operational standards in Sections 1 through 4.

Data centres and remote gaming servers must be approved by AGLC, including a data residency designation, cross-border transfer assessment, and encryption key residency review. Remote access must be secured using zero-trust principles, device posture checks, multi-factor authentication (MFA), and session recording for third-party access. Encryption algorithms and key lengths must meet or exceed AES-256 and RSA-2048, and must be evaluated at least annually or upon emergence of new cryptographic vulnerabilities. Time synchronisation across all components must use authenticated NTP (e.g., NTS).

A recognised industry standard IT control framework must govern the IT environment. Access privilege reviews must be completed on a quarterly basis, with attestations and supporting evidence retained for at least two years. Administrative and privileged accounts must be limited to authorised personnel and protected by phishing-resistant MFA.

Pre-launch, registered operators must provide AGLC with results from independent security vulnerability assessments and internal/external penetration testing of Alberta production infrastructure and applications. Severe security risks must be remediated before gaming systems go live, with remediations verified through an additional scan.

Responsible Gambling Obligations Under SRIG Section 3

What Responsible Gambling Tools Must Alberta Operators Provide?

Registered operators must implement a suite of mandatory responsible gambling tools, all of which are product and workflow requirements, not merely policy commitments. The following must be operational before a site goes live in Alberta.

Deposit and wagering limits must be offered to all players, set by the player, and subject to a cooling-off period of at least 24 hours before any relaxation or elimination of a previously established limit takes effect. Only the player may request a limit change. Reminders to review financial and time-based limits must be sent at least quarterly, reminders to review financial account activity must be sent at least monthly.

Breaks in play are mandatory. Registered operators must offer players the option to take a one-day, one-week, one-month, two-month, or three-month break. Once initiated, the player cannot place further wagers for the duration of the break, though account access for balance enquiries and responsible gambling features remains available during a break period.

Player risk profiling is a mandatory programme requirement, not an advisory practice. Operators must have policies and programmes in place to assess and monitor player risk profiles, with records of risk profiling, interventions, and manual adjustments to player risk scores maintained to demonstrate SRIG compliance.

Responsible gambling information must be readily visible and accessible to all players. Content must include how games work, common misconceptions, lower-risk gambling behaviours, details on available tools, gambling harms information, and the AGLC self-exclusion programme details. All advertising and marketing materials must include a responsible gambling message.

Centralized Self-Exclusion: AGLC’s System and API Integration

Alberta’s centralized self-exclusion programme is the functional equivalent of Ontario’s BetGuard system and must be integrated by all registered operators before market launch. This is not a contractual option, it is a third-track registration requirement.

AGLC maintains a centralized list of prohibited persons who are convicted, legally excluded, or have otherwise been determined inadmissible to an iGaming site. All registered operators must maintain an effective API connection to AGLC’s centralized information system. The iGaming site must prevent any individual not cleared by AGLC’s centralized system from registering an account or logging into an existing account. Discrepancy reports must be submitted to AGLC within 72 hours on all prohibited persons who attempt to enter or remain on a site.

When a player self-excludes, all marketing communications to that player must cease immediately. The operator must provide a mechanism to return unused balances on request. If a player self-excludes before the commencement of an event on which a wager is pending, the wager must be refunded. If the player self-excludes after the event has commenced, the operator is not required to refund that wager. Players’ self-exclusion records must be updated across the platform as AGLC updates the centralized list.

The SRIG also requires that players be provided with AGLC’s Gaming Irregularities contact number (1-800-742-7818) and that unresolved customer disputes are escalated to AGLC. AGLC and AiGC contact information must be displayed and easily accessible to all players on the site.

AML and KYC: FINTRAC Obligations and AiGC’s Role

Anti-money laundering obligations in Alberta’s iGaming market are governed at the federal level by FINTRAC under the Proceeds of Crime (Money Laundering) and Terrorist Financing Act. Operators who qualify as reporting entities under that Act carry their own direct FINTRAC obligations independently of the AGLC registration process.

Structurally, AiGC holds primary responsibility for AML oversight within the commercial agreement framework, including financial reporting and income management. AML-related obligations therefore flow through two channels: FINTRAC at the federal level and AiGC through the commercial agreement at the provincial level. Operators should engage qualified legal counsel to map their specific AML programme requirements against both frameworks before launch, as the interaction between federal FINTRAC reporting and AiGC’s own financial controls is not fully elaborated in the publicly available SRIG text.

On KYC, the SRIG requires that all player accounts be uniquely identifiable and that players be authenticated before accessing their accounts. One account per player per gaming site is the maximum. An auditable trail of events covering account creation, activation, deactivation, and changes, including player identification and verification information and contract acceptance records, must be maintained. Third parties are prohibited from accessing a player’s account. Players must be offered multi-factor authentication at login.

Player personal information may only be used for the lottery schemes conducted and managed respectively by AGLC or AiGC. Data collection and protection must meet the requirements set out in the pertinent Alberta privacy legislation, which for private-sector operators is PIPA, not PIPEDA.

Advertising Standards Under SRIG Section 4.1

SRIG Section 4.1 governs advertising and promotions. All advertising and marketing materials must include a responsible gambling message. Registered operators must ensure that independent third parties engaging in direct-to-consumer marketing, promotions, or player referral services on the operator’s behalf conduct themselves as if bound by the same legislation and standards applicable to the operator. Operators must maintain a list of all suppliers providing goods or services in relation to lottery schemes and must make that list available to AGLC on request.

Advertising must be geo-restricted to Alberta. Google Ads updated its gambling advertising policy to permit licensed Alberta iGaming operators to run brand-awareness campaigns prior to the July 13, 2026 launch, provided advertisers submit valid proof of their AGLC licence application and restrict targeting to Alberta. This policy mirrors Google’s earlier update for Ontario ahead of that market’s 2022 launch. Operators advertising before registration is finalised must comply with AGLC responsible gambling advertising requirements, and campaigns may not extend to other Canadian provinces.

Alberta’s advertising standards are still being refined in certain areas. As of the time of writing, several key regulatory decisions regarding athlete marketing and specific advertising restrictions remained pending finalisation. Operators must monitor AGLC’s published guidance and the AGLC Notification Matrix (updated May 15, 2026) for any published amendments before launch.

Operators must not advertise or market to self-excluded players. Once an operator has been notified of a self-exclusion, that player must be immediately removed from all marketing efforts. Promotion of gambling to minors is prohibited, and operators must implement controls to prevent account creation and access by persons under 18.

PIPA: Alberta’s Data Privacy Regime for iGaming Operators

Operators accustomed to federal privacy obligations under PIPEDA should note clearly: PIPEDA does not apply to the collection, use, and disclosure of personal information by private-sector operators in Alberta within the province. Alberta’s Personal Information Protection Act (PIPA), SA 2003, c P-6.5, in force since January 1, 2004 and current as of September 1, 2025, is the applicable provincial private-sector privacy law, which the federal government has designated as substantially similar to PIPEDA.

Under PIPA, operators must collect personal information only for reasonable purposes, obtain consent, limit use and disclosure to those purposes, ensure accuracy and completeness, and designate a Privacy Officer with documented policies and procedures for privacy breaches. The Office of the Information and Privacy Commissioner of Alberta (OIPC) oversees PIPA compliance.

The SRIG reinforces this directly: player personal information collected in connection with iGaming operations must meet the requirements set out in pertinent Alberta privacy legislation, and may only be used for lottery schemes conducted and managed by AGLC or AiGC. Cross-border data transfers require a cross-border transfer assessment as part of AGLC’s data centre and server approval process under Section 5.

A live privacy concern that operators must monitor: Alberta’s Bill 31, reported as enacted in May 2026, permits AGLC to sell Play Alberta customer data. Alberta’s Privacy Commissioner Diane McLeod has publicly raised concerns that this creates a precedent-setting conflict with the Protection of Privacy Act (POPA), which prohibits public bodies from selling personal information. AGLC has stated there are no immediate plans to sell player data and has committed to notifying customers and providing opt-out options if it proceeds. This development signals that Alberta’s data governance environment is active and contested. Operators should track OIPC guidance as the Bill 31 position evolves, and consult qualified legal counsel in Alberta for specific application to their data architecture.

Control Activity Matrix and Go-Live Compliance Documentation

Before going live in Alberta, registered operators must provide AGLC with a Control Activity Matrix (CAM), a structured summary of the operator’s processes and controls related to the iGaming site. All required controls must be operational before launch, not merely designed. The CAM must be independently audited by an internal audit function that was not involved in developing the CAM, or by a designated external auditor. The audit results confirming compliance must accompany the CAM submission.

Registered operators must also provide AGLC with an annual Technology Compliance Confirmation confirming that their entire technology solution is compliant with all applicable SRIG requirements. For operators using third-party registered Goods or Services Suppliers for critical gaming systems, those suppliers submit their own Technology Compliance Confirmations for their systems, the operator’s confirmation covers the integration of those systems into the platform.

Critical gaming systems include certified games, RNGs, and any system component subject to ATF certification. Any modification to a critical gaming system after the initial certification requires re-submission for recertification unless it qualifies as a regulatory fix under the emergency procedure described in the SRIG.

Revenue Structure and Betting Restrictions

Alberta’s market uses a revenue-sharing model where registered operators retain 80% of gross gaming revenue, with 20% retained by Alberta through AiGC. From the 20% Alberta share, 2% of GGR is allocated to First Nations and 1% to social responsibility initiatives. An additional 3% levy comes off gross before the 80/20 split is applied. Provincial budget projections published in 2026 anticipate $75 million in iGaming revenue in the first year (2026-27), growing to $109 million by 2028-29.

The SRIG and enabling legislation impose betting restrictions that operators must encode into their systems. Wagering on the following is prohibited: political events, matters involving human suffering or death, animal cruelty, financial markets, and minor league sports events. Games must be provided only within Alberta unless conducted in conjunction with the government of another province. Geolocation verification ensuring play occurs within provincial boundaries is a mandatory technical requirement.

Sports and event betting is governed by Section 4.6 of the SRIG. Operators providing sports betting must ensure integrity-related concerns or violations of the SRIG are escalated to AGLC immediately. Sports integrity conflicts of interest, such as a supplier acting simultaneously as oddsmaker, are prohibited.

Market Context and Operator Landscape

Alberta is the second Canadian province to establish a competitive private-operator iGaming market, following Ontario’s April 2022 launch. As of May 2026, 28 operators had either registered or initiated registration with AGLC, with the full field expected to exceed 55 operators by launch, according to market reports. Confirmed participants include bet365, DraftKings, FanDuel, BetMGM, Caesars, theScore Bet, and Bet99. Play Alberta, the AGLC-operated platform, pre-dates the private market and serves as the incumbent consumer brand, it reported over 434,000 registered users and $275 million in net sales for the 2024-25 fiscal year.

Ontario’s experience is the closest operational analogue for Alberta compliance teams, and the AGCO vs AGLC structural comparison is covered in the companion article on Ontario iGaming compliance. The critical difference to internalise is that Alberta’s AiGC is an operationally active Crown corporation, not merely a contractual intermediary, and that AiGC holds AML, complaint, and financial reporting functions that iGaming Ontario does not hold in the same way.

For consumer-facing market context, player-facing guides covering the Alberta market are maintained by CanadaCasinos’ Alberta casino guide and SportsBettingCanada’s Alberta sportsbooks guide, which are updated as operators launch.

Key Resources

AGLC Standards and Requirements for Internet Gaming (SRIG), issued January 14, 2026 (Sections 1, 4) and February 5, 2026 (Section 5), Authority: Board Chair. Available via aglc.ca/igaming.

AGLC iGaming Operator Registration Guidance and Go-Live Compliance Guide, updated May 15, 2026. Available via aglc.ca/igaming.

iGaming Alberta Act (Bill 48), the primary enabling statute establishing AiGC and the regulated lottery scheme structure.

Gaming, Liquor and Cannabis Act (Alberta), the co-enabling statute governing AGLC registration authority.

Personal Information Protection Act (PIPA), SA 2003, c P-6.5, current as of September 1, 2025. Published by Alberta King’s Printer. Governs private-sector data collection by operators in Alberta.

Office of the Information and Privacy Commissioner of Alberta (OIPC), oipc.ab.ca. PIPA enforcement body and source of interpretive guidance on data privacy obligations in Alberta.