Live Casino Compliance: Studio Standards, Streaming Latency, and Dealer Vetting Across Key Jurisdictions

Live casino is the product category where physical space, human conduct, and streaming infrastructure intersect directly with licence obligations. Regulators treat that intersection seriously: studio access controls, dealer qualification records, and video feed integrity are each addressable regulatory failures, not merely operational shortcomings. For compliance officers managing multi-jurisdiction live casino deployments, understanding what each regulator actually requires, as opposed to what studio suppliers generally offer, is essential before a single hand is dealt.

How Regulators Classify Live Casino: B2B, B2C, and the Critical Supply Chain

The regulatory classification of a live casino studio determines who bears the primary compliance obligation. Under the Malta Gaming Authority’s Gaming Authorisations and Compliance Directive (Directive 3 of 2018), live casino is a named gaming vertical within the B2B critical gaming supply framework. A company providing live dealer games to MGA-licensed B2C operators must hold a B2B licence covering that critical supply, unless the supply is provided by an entity within the same corporate group licence, in which case no separate B2B licence is required. Directive 3 of 2018 also specifies key functions that must be designated within licensed B2C operations offering live casino, including management of the pit, supervision of croupiers and assistants, management of the gaming area to preclude fraud, and management of surveillance systems of gaming premises.

Under the AGCO Registrar’s Standards for Internet Gaming (last updated May 2025 and in force since the Ontario market launch on 4 April 2022), operators bear accountability regardless of which entity carries out the underlying activity. Standard 1.19 confirms that operators are expected to ensure all standards relating to the operation of their gaming site are met, including those performed by gaming-related suppliers. Live dealer game providers operating in Ontario must themselves be registered as gaming-related suppliers. The structural implication is straightforward: an operator cannot outsource away its obligation under Standards 4.35 and 4.36. The standards follow the product, not the contracting entity.

The AGLC Standards and Requirements for Internet Gaming (SRIG, issued 14 January 2026 with authority date 17 March 2026) mirrors this approach. Alberta’s framework, which governs the provincial market that opened on 13 July 2026, assigns live dealer compliance obligations to registered operators, with physical gaming equipment including roulette wheels, dice tables, and card shufflers with electronic components required to receive ATF certification from an AGLC-registered Accredited Testing Facility before deployment.

What Does Studio Physical Security Actually Require?

The UKGC Remote Technical Standards (RTS), made a condition of all remote operating licences under LCCP 2.3.1, set out implementation guidance for live dealer and other games covering four distinct physical security obligations. Secure areas, gambling equipment, and consumables must be protected by appropriate access controls to ensure only authorised personnel have access. Video surveillance must be in place sufficient to cover all predefined gaming areas, with enough detail to confirm whether dealing procedures and game rules were followed. Gambling provision must be supervised by staff responsible for overseeing dealer activities and integrity. Game logs must be maintained, with game events collated into statistics that can be analysed for trends relating to game performance, staff, and locations.

“Video surveillance to record all dealer activity should be in place, enough to cover the predefined gaming areas with sufficient detail to confirm whether dealing procedures and game rules were followed.”

The AGCO Registrar’s Standards add a specific access-management overlay to this physical security framework. Standard 4.35, added in October 2022, requires that access to live dealer gaming supplies be restricted to individuals with a business need, and that access privileges be granted, modified, and revoked based on employment status and job requirements, with all activity associated with those actions logged. Privileges must also be independently reviewed and confirmed on a periodic basis. The standard uses “gaming supplies” in its broadest sense, and the accompanying guidance confirms it extends to gaming equipment used in live dealer games that contains electronic components.

GLI-19 v3.0 (Standards for Interactive Gaming Systems, the primary technical standard accepted by a wide range of regulated jurisdictions) addresses studio equipment security in Appendix C.6.5. The live game service provider must provide a secure location for the placement, operation, and usage of live game equipment, including simulcast control servers, gaming servers, and communications equipment. Equipment must be installed according to a defined plan, sited or protected to reduce risks from environmental threats, unauthorised access, power failures, and disruptions from supporting utilities. Access to live game equipment by gaming attendants must be controlled by a secure logon procedure or other secure process. Security policies and procedures must be reviewed periodically to ensure risks are identified, mitigated, and underwritten by contingency plans.

New Jersey’s Division of Gaming Enforcement (DGE) imposes a jurisdictional requirement that goes further than most. Under N.J.A.C. 13:69O, primary gaming equipment used to conduct internet or mobile gaming must be located in a restricted area on the premises of a casino hotel within the territorial limits of Atlantic City, New Jersey, or in another facility owned or leased by the casino licensee that is secure, inaccessible to the public, and specifically designed to house that equipment, within the territorial limits of Atlantic City. This geographic constraint means that live studio infrastructure serving New Jersey patrons must either be physically present in Atlantic City or connected to a primary equipment location there. Internet gaming intermediaries and third-party studios cannot independently situate equipment outside Atlantic City without full DGE approval.

Dealer Vetting: Who Checks Whom, and How?

Dealer background screening obligations are less uniformly codified across jurisdictions than studio physical security, but the regulatory expectation of suitability is consistent. The UKGC’s fit and proper framework under the Licence Conditions and Codes of Practice applies to licensees and their key personnel, and the RTS implementation guidance for live dealer games specifies that dealer training must be documented. Evidence of training and refresher training should be maintained, and gambling provision should be supervised by staff responsible for overseeing dealer activities and integrity.

Under AGLC SRIG Section 4.5, operators must ensure staff supervising live table games are appropriately trained and have the skills required to perform their assigned duties. The rules of play for live dealer table games in Alberta must comply with AGLC’s Casino Terms and Conditions and Operating Guidelines Section 6.1. The live game product is not simply certified and deployed, the human operating it must meet a distinct performance standard referenced to the AGLC’s own casino operating guidelines.

AGCO Standard 4.36 (added October 2022) requires operators to have controls in place to ensure live dealer game presenters do not compromise the integrity of a game. The standard does not prescribe a specific screening methodology, reflecting the AGCO’s outcomes-based regulatory model under the Gaming Control Act, 1992. Operators and their live dealer suppliers should document the background check process applied to game presenters, the refresh cadence for those checks, and the controls that address the risk of insider collusion or manipulation. The AGCO’s Go-Live Compliance Guide confirms that games including live dealer games must be appropriately monitored for proper performance and to deter, prevent, and detect collusion and cheating, referencing Standards 4.09 and 4.17.

The MGA’s Directive 3 of 2018 assigns specific key functions for B2C licensees operating live casino premises, including management of the pit, supervision of croupiers and assistants, and resolution of customer disputes in the gaming area. These functions must be assigned to designated, approved individuals. The fit and proper assessment under Malta’s Gaming Act 2018 (Cap. 583 of the Laws of Malta) covers both entity-level and individual-level suitability, and the MGA can require disclosure of changes to persons performing key functions within 30 days under the relevant notification provision of Directive 3.

Streaming Signal Integrity and Latency: The GLI-19 Framework

Streaming latency is not simply a quality-of-service issue, it is a game integrity issue. GLI-19 v3.0 Section 4.18 sets out the general requirements applicable to live games where authorized by a regulatory body. The entire live game process must be viewed by all players through a real-time remote audio and video feed using streaming, narrowcast, broadcast, or other technology, combined with a graphical interface. The Gaming Platform must receive player instructions through the player interface or another communication channel to facilitate player decisions. The standard also prohibits the Gaming Platform from providing any real-time information for the current live game being played that could aid in projecting or predicting the outcome.

The simulcast control server requirements in GLI-19 Appendix C.6.4 are operationally specific. Servers must provide each player with an equivalent quality video and audio feed, and that equivalence must be measured and verified whenever communications are initiated, including after reconnection due to signal interruptions or when a signal is re-initiated after severance. A minimum signal connection requirement must be established, enforced, and disclosed to the player. The simulcast control server must prevent anyone from accessing the live game outcome prior to finalising a wager, and must record game results before posting to the Gaming Platform. An authorised employee mechanism to void game results must also be in place.

“A minimum signal connection requirement shall be established, enforced and disclosed to the player”, and the simulcast control server must prevent anyone from accessing the live game outcome prior to finalizing a wager.

The GLI-19 live game procedures framework in Appendix C.6.8 requires that procedures be in place to enable a suitable response to any security issue within live game services, to prevent any person from tampering with or interfering with the operation of any live game or live game equipment, and that separate procedures exist for each game. New games must have procedures established before introduction, and all procedures must be reviewed periodically.

The GLI-19 standard also addresses interruption handling. The Gaming Platform must describe procedures for dealing with live game interruptions caused by discontinuity of data flow, video, and voice from the network server during a game, including internet connection outages and simulcast control server malfunctions. It must indicate the possibility of human error by the gaming attendant and system error by specialised devices, and explain how those errors are resolved.

RNG-Physical Hybrids: Certification Requirements Across Jurisdictions

Live dealer games frequently combine a physical game-of-chance element with electronic outcome detection and recording. Roulette wheels fitted with optical scanners, automated card shufflers with electronic logging, and dice tables with RFID detection all fall into this hybrid category. The certification obligation for these systems is not uniform, but it applies in every major regulated market.

Jurisdiction	Regulator/Standard	Physical RNG/Equipment Certification Requirement	Certification Body
Ontario	AGCO Registrar’s Standards (Standard 4.08)	Physical RNGs with electronic elements used in live dealer games must be certified by an ITL registered by the Registrar	AGCO-registered ITL
Alberta	AGLC SRIG 2026-03-17 (Section 4.12)	Physical RNGs with electronic elements, roulette wheels, dice tables, card shufflers with electronic components must be ATF certified before Alberta deployment	AGLC-registered ATF
UK	UKGC RTS / LCCP 2.3.1	RNG certification required, live dealer RNG-physical hybrids assessed against RTS requirements and relevant ISO/IEC 27001:2022 security standards	UKGC-approved test house
Malta	MGA Gaming Act 2018 / Technical Infrastructure Standard	RNGs are critical components, MGA requires certification of hosting and critical game components, PCI DSS Level 1 for payment data, ISO/IEC 27002:2013 guidance for cloud providers	MGA-approved laboratory
New Jersey	N.J.A.C. 13:69O / DGE	All gaming systems and equipment must be approved by the Division prior to use, annual independent system integrity and security assessment required	Division-approved entity
Multi-jurisdiction	GLI-19 v3.0, Section 4.18 / Appendix C	Live game equipment must meet minimum standards determined by the regulatory body, simulcast control servers evaluated independently, equivalence of player video feeds must be measured and verified	GLI or equivalent accredited lab

Under the AGCO’s ITL Certification Policy, the certification obligation extends to all gaming equipment used in live dealer games that contains electronic components. This captures the physical outcome-determination hardware, not only the primary game server. Certification must be completed before deployment, and re-certification is required when any modification or subsequent discovery of an undetected issue impacts critical gaming system integrity, fairness, security, or compliance. Emergency regulatory fixes can be deployed immediately but must be submitted to an ITL within five business days under the AGCO’s Go-Live framework.

Jurisdiction-Specific Structural Requirements

Beyond the common themes of access control, dealer integrity, and signal standards, each jurisdiction imposes structural requirements that shape how live casino products are deployed.

The UKGC applies its compliance framework through LCCP 2.3.1, which makes the RTS a direct licence condition for all remote operating licence holders, including gambling software operators. Live dealer products supplied to UKGC-licensed operators by non-UK-licensed suppliers are assessed through the operator’s own compliance obligations, meaning the operator must ensure the product meets RTS requirements. The Commission’s December 2024 review of Evolution Malta Holding Limited’s operating licence, following identification of Evolution games on UK-accessible sites without a Commission licence, illustrates the practical reach of this requirement. The review remained ongoing as of 2025. Operators must be able to demonstrate that their live dealer game supply chain is licensed or certified appropriately for the UK market. For a detailed breakdown of how UKGC and MGA licence structures compare for B2B suppliers, see the UKGC vs MGA licence comparison.

The MGA’s framework under the Gaming Act 2018 (Cap. 583) and Directive 3 of 2018 creates a live casino vertical distinct from other casino games. The vertical-specific classification means that removing live casino from a product offering requires notification to the Authority within 30 days as a material change. B2B suppliers of live casino critical gaming supplies are jointly and severally liable with their B2C licensee clients for compliance failures where both are MGA-authorised, with the Authority determining case-by-case responsibility allocation.

In New Jersey, the DGE’s Chapter 69O framework requires casino licensees offering internet gaming to file internal controls for all aspects of internet and mobile gaming operations prior to implementation and any time a change is made. Those internal controls must include detailed procedures for system security, operations, accounting, and reporting. The internet and mobile gaming manager, a designated key employee position, must immediately notify the Division upon detecting any person engaging in or reasonably suspected of cheating, theft, embezzlement, collusion, or money laundering. An annual independent system integrity and security assessment is required, conducted by an independent professional approved by the Division, with the report submitted annually.

What Live Dealer Compliance Looks Like in Practice

The Evolution/DGE matter provides the clearest available illustration of how live studio compliance is scrutinised in a major US market. Following the 2021 Black Cube report alleging that Evolution games had reached restricted markets, the NJ DGE conducted sworn interviews with Evolution’s CEO, then-CFO, and Chief Legal and Compliance Officer in Stockholm, a level of scrutiny that underscores how seriously the Division treats studio-level conduct questions. The NJ DGE closed its investigation in February 2024 with no further action, and Pennsylvania’s regulator similarly closed its review without corrective action. The scope of the investigation itself, travelling overseas to interview executives under oath, demonstrates the standard of inquiry that live casino infrastructure operators should expect when their studio supply chain is questioned by a major regulator.

For operators building a multi-jurisdiction live casino compliance programme, the practical implications run across several interconnected obligations. The supplier must hold the correct licence class in each jurisdiction: a B2B critical gaming supply licence from the MGA, a gaming-related supplier registration from the AGCO, an AGLC registration, and separate DGE approval in New Jersey. Physical access to the studio must be controlled, logged, and independently reviewed. Dealer training records must be maintained and refreshed. Streaming signal standards must be documented and disclosed to players. Physical outcome-determination equipment must be independently certified before deployment and re-certified after material changes. Internal controls must be filed with regulators before implementation and updated after any change. The AGCO registration requirements profile covers the full supplier registration process for Ontario in detail.

A live casino studio that meets one regulator’s physical security standards will not automatically satisfy another’s, the AGCO access-log requirement, the DGE Atlantic City location rule, and the AGLC Casino Terms reference each add obligations that a studio designed primarily for MGA compliance may not have built in.

Collusion Detection and Game Monitoring

The UKGC RTS implementation guidance for live dealer games sets out a specific collusion detection framework. Records should be kept of which players played at which tables and the amounts won and lost. Prevention measures should address the risk of a player occupying more than one seat at any individual table. Detection measures should cover players who frequently share the same tables, players from the same address sharing a table, suspicious patterns of play such as chip dumping, and unusual gameplay statistics. Customer complaints about cheating must be investigated, and records kept of investigations resulting in account closure, including player details, scale of offences, and relevant evidence such as screenshots and chat history.

The AGCO Go-Live Compliance Guide confirms that games including live dealer games must be monitored for proper performance and to deter, prevent, and detect collusion and cheating (Standards 4.09 and 4.17). This monitoring obligation applies both to operators and to gaming-related suppliers running critical gaming systems. In Alberta, AGLC SRIG Section 4.5 requires operators to have controls in place to ensure live dealer game presenters do not compromise the integrity of a game, creating a specific presenter-conduct control obligation separate from the general monitoring obligation.

These requirements have direct implications for studio operating procedures. Game logs must not only be maintained, they must generate statistics analysable for trends. Access to studio systems must be role-segregated. Monitoring must operate in real time. The AGLC SRIG requires that logs be protected against alteration through WORM storage, cryptographic signing with SHA-256, or equivalent, transmitted and stored over TLS 1.2 or higher, with access role-based and segregated between operations and monitoring functions.

Key Resources

UKGC Remote Gambling and Software Technical Standards (RTS): gamblingcommission.gov.uk, The primary technical standard governing all UKGC remote licence holders, including live dealer game requirements under LCCP 2.3.1. For a detailed breakdown of UKGC remote technical standards, see the UKGC Remote Technical Standards explorer on this site.

AGCO Registrar’s Standards for Internet Gaming: agco.ca, Standards 4.35 and 4.36 govern live dealer access controls and presenter integrity in Ontario.

AGLC Standards and Requirements for Internet Gaming (SRIG), version dated 17 March 2026: aglc.ca, Section 4.5 covers live dealer requirements for Alberta’s market. Background checks and ATF certification for physical live dealer equipment are covered in Sections 2.4 and 4.12 respectively.

GLI-19 Standards for Interactive Gaming Systems v3.0: gaminglabs.com, Section 4.18 and Appendix C set the technical baseline for live game requirements accepted by regulators in North America, Europe, and Latin America. For context on GLI-19 versus GLI-33 certification path selection, see the GLI-19 vs GLI-33 article on this site.

MGA Gaming Authorisations and Compliance Directive (Directive 3 of 2018): mga.org.mt, Governs B2B critical gaming supply licensing for live casino providers and key function designations under Malta’s Gaming Act 2018 (Cap. 583).

New Jersey N.J.A.C. 13:69O (Chapter 69O, Internet and Mobile Gaming): nj.gov, Sets out equipment location requirements, key employee obligations, internal controls filing requirements, and the annual security assessment mandate for DGE-regulated internet gaming operations. To begin your live casino compliance review, start with your jurisdiction’s primary regulator documentation listed above, then use this live casino compliance checklist to map your implementation roadmap against the multi-jurisdiction requirements outlined in this article.