Ontario iGaming at Year Three: AGCO Compliance Lessons for New Entrants

Ontario’s Regulatory Architecture: Three Years On

Ontario’s regulated internet gaming market opened on 4 April 2022, making it Canada’s only fully open, multi-operator online gambling jurisdiction. The framework is deliberately bifurcated. The Alcohol and Gaming Commission of Ontario (AGCO) issues registrations, sets the Standards for Internet Gaming, and holds enforcement authority over all registered operators. iGaming Ontario (iGO), a subsidiary of the Ontario Lottery and Gaming Corporation, acts as the market counterparty and enforces compliance through the Operator Agreement that every registered operator must sign before going live. New entrants consistently underestimate the practical consequence of this structure: the AGCO and iGO are distinct entities with distinct compliance levers, and satisfying one does not discharge obligations to the other.

After three full years of operation, a body of enforcement action, audit findings, and standards revisions has accumulated that provides new entrants with something the 2022 cohort did not have: a reasonably clear picture of where the AGCO and iGO focus their scrutiny. This article synthesises that picture for compliance teams preparing to enter or recently entered into the Ontario market.

The Dual-Authority Model and Its Compliance Implications

Under the Gaming Control Act, 1992, the AGCO Registrar holds authority to issue, suspend, and revoke registrations and to impose conditions on registrants. The AGCO’s Standards for Internet Gaming (commonly referred to as the iGaming Standards) are the primary technical and operational rulebook. They cover player registration and verification, responsible gambling tools, advertising and marketing, technical system requirements, and reporting obligations.

The iGO Operator Agreement sits alongside the AGCO framework. It governs the commercial relationship between iGO and the registered operator, but it also incorporates compliance obligations that parallel and in some respects extend beyond the AGCO Standards. Operators are required under the Operator Agreement to meet all AGCO Standards by reference, meaning a breach of an AGCO Standard is simultaneously a breach of the Operator Agreement. The reverse is not automatically true: iGO contractual obligations do not create AGCO regulatory obligations, but practical enforcement from iGO can precede or accompany AGCO regulatory action.

New entrants should map every compliance obligation to its source authority from day one. A gap analysis that addresses only the AGCO Standards without reviewing the Operator Agreement in detail will miss obligations that iGO has the contractual right to enforce independently of any AGCO proceeding.

In practice, operators should treat the two frameworks as a single integrated compliance requirement and assign ownership of each obligation to a named internal function. The AGCO has made clear through its public communications that it expects registrants to maintain documented compliance programmes, not merely to deploy the required tools.

Advertising Standards: The Most Active Enforcement Area

Advertising compliance has been the most publicly visible area of AGCO enforcement activity since market opening. The AGCO published its Advertising Standards for Internet Gaming as a standalone document, and these standards have been revised since the initial April 2022 launch to address issues identified in the first operating year. Revisions have tightened restrictions on promotional content directed at or likely to appeal to minors, requirements around clear and prominent display of terms and conditions for bonuses and promotions, and the use of athlete and celebrity endorsements.

The AGCO’s advertising standards prohibit registered operators from using advertising that misrepresents the odds of winning, that makes misleading claims about bonuses, or that targets individuals who have self-excluded. The prohibition on marketing to self-excluded players extends to third-party affiliate channels, which means operators bear responsibility for affiliate compliance under the relevant code provisions of the iGaming Standards. This affiliate liability has caught several early-market operators off guard, and it remains an active audit focus.

Bonus and promotion advertising requires particular care. The AGCO Standards require that material terms and conditions, including wagering requirements, game restrictions, and expiry dates, be clearly disclosed in the advertisement itself, not merely linked through a terms and conditions page. Operators accustomed to European disclosure conventions, where a hyperlink to full terms is often treated as sufficient, should note that Ontario’s requirements are more prescriptive at the point of promotion.

Responsible Gambling: Audit Findings and the Process Gap Problem

The AGCO’s Standards for Internet Gaming mandate a comprehensive suite of responsible gambling tools. These include mandatory pre-session and in-session reality checks, deposit limits that must be applied immediately when a player sets a lower limit and subject to a cooling-off period when a player seeks to increase them, self-exclusion functionality integrated with the province-wide GameSense self-exclusion registry, and time-out options. These requirements are broadly known and most operators entering the market have them technically deployed at launch.

What audit findings from iGO’s compliance review cycles have consistently revealed is a different category of deficiency: process gaps rather than tool gaps. Specifically, operators have been found to lack documented internal procedures for escalating player behaviour indicators to a responsible gambling review, for testing that RG tools are functioning correctly on a scheduled basis, and for training staff who handle player contacts to recognise and respond to RG concerns. The AGCO Standards require operators to have these processes in place and to be able to evidence them. Deploying the tool without the surrounding governance framework does not satisfy the standard.

The Standards for Internet Gaming also require operators to provide players with access to their responsible gambling interaction history, including a record of limits set and self-exclusion events. This is an area where technical implementation varies considerably across platforms, and new entrants should confirm that their platform vendor has built this functionality in a form that meets the Ontario specification, not merely a generic European implementation.

Industry consensus is that operators who enter Ontario with a platform certified in one or more European jurisdictions frequently discover that RG tool configurations meet the minimum European standard but require material reconfiguration to satisfy the specific parameters set in the AGCO’s iGaming Standards. Platform certification in another jurisdiction is not a proxy for Ontario compliance.

Player Verification and KYC: Where Timelines Matter

The AGCO’s Standards for Internet Gaming establish specific requirements for player registration and identity verification. Operators must verify player identity before permitting a withdrawal. The standards also set out requirements for the documents and data points that constitute sufficient verification, and they impose record-keeping obligations on the verification process itself.

The requirement to verify before withdrawal is clear in the standards, but operators have encountered compliance issues around what constitutes a “completed” withdrawal request and at what point in the withdrawal workflow the verification check must have been completed. The AGCO has not published detailed interpretive guidance on this sequencing, and operators should consult qualified legal counsel to confirm their specific implementation satisfies the relevant standard. Where platform workflows process withdrawal initiation and verification in parallel rather than sequentially, operators should document the compliance rationale and retain evidence that no funds were released prior to completed verification.

Age verification at registration requires particular attention. The AGCO Standards require that players be verified as 19 years of age or older before being permitted to play. The province’s legal gambling age is 19, not 18, which differs from several European markets. Operators migrating a platform from a jurisdiction with an 18-year minimum must confirm that the age gate logic, date-of-birth fields, and verification thresholds all reflect the Ontario requirement.

Reporting, Incident Notification, and AGCO Engagement

The Standards for Internet Gaming require registered operators to notify the AGCO of specified incidents within defined timeframes. These include significant technical failures, data breaches affecting player information, material changes to corporate ownership or control, and certain player complaints that cannot be resolved through the operator’s internal dispute resolution process. Timeliness of incident notification has been an area of scrutiny, and the AGCO has indicated through its compliance communications that it views delayed notification as a compounding factor when assessing the seriousness of an underlying incident.

New entrants should build incident classification and escalation procedures into their compliance frameworks before launch. The question of what constitutes a notifiable incident under the iGaming Standards is not always self-evident, particularly for technical failures that affect a subset of players rather than the full player base. Again, operators should seek legal advice on the scope of the notification obligation rather than applying a conservative guess based on other jurisdictions’ standards, which may use different thresholds.

The AGCO has generally signalled that it expects proactive engagement from registrants. Where an operator identifies a compliance issue through its own monitoring and self-reports to the AGCO, the regulator has indicated, through its published enforcement approach, that voluntary disclosure is a factor in its assessment. This does not amount to a formal safe harbour, but it reflects a regulatory culture that rewards transparent compliance management over reactive damage control.

What New Entrants Should Pre-empt

The three-year enforcement and audit record points to a set of pre-launch and early-operation priorities that are distinct from the formal checklist of registration requirements. First, operators should conduct a structured gap analysis of their platform against the current version of the AGCO’s Standards for Internet Gaming in full, including the technical standards annexes. This analysis should be carried out against the current version of the standards, not the version in effect at market launch in 2022, given the revisions since that date.

Second, advertising and marketing compliance procedures should be stress-tested before the first promotional campaign goes live. This means reviewing affiliate agreements to confirm that the operator’s advertising obligations flow down contractually to affiliates, establishing a pre-approval workflow for promotional content, and building a retention system for all marketing materials. The AGCO’s advertising standards apply to all channels through which the operator’s brand appears, including social media, search advertising, and influencer content.

Third, responsible gambling governance documentation should be completed before launch, not after. The RG audit findings from the first three years consistently involve documentation and process deficiencies rather than tool absence. Operators should be able to produce, on request, a current RG policy document, evidence of staff training completion, records of scheduled RG tool testing, and a log of player escalations and outcomes.

Fourth, the iGO Operator Agreement should be reviewed by legal counsel with specific Ontario iGaming experience. The Agreement contains provisions relating to revenue share, reporting, and compliance that interact with AGCO Standards in ways that require careful interpretation. Operators should not rely solely on internal legal review by counsel familiar with other Canadian or international gaming jurisdictions without ensuring that counsel has reviewed the specific Ontario framework documents.

The Competitive and Regulatory Outlook

Ontario’s market has matured faster than most comparable newly regulated markets. Player volumes have grown steadily, and the number of registered operators has expanded beyond the initial cohort. The AGCO has correspondingly increased its compliance activity, and the shift from onboarding-focused engagement in the first year to active audit and enforcement in years two and three reflects a regulator moving into steady-state supervision mode.

For new entrants, this means the tolerance for early-operation compliance gaps that some of the founding cohort benefited from is effectively gone. The AGCO has a body of precedent, a clearer set of audit protocols, and a more developed enforcement toolkit than it did at launch. Operators entering in year three or later should expect compliance scrutiny from a regulator with three years of market experience, not the relative flexibility of a market that was still finding its supervisory footing.

The advertising standards are likely to continue evolving. The AGCO has signalled ongoing attention to the volume and character of gambling advertising visible to Ontario audiences, consistent with broader Canadian public policy discussions around gambling marketing. Operators should monitor AGCO communications and consult legal counsel when revisions are published, as transitional timelines for compliance with amended standards have sometimes been tight.

Key Resources

AGCO Standards for Internet Gaming (current version): agco.ca/lottery-and-gaming/standards-internet-gaming. The primary technical and operational rulebook for all registered internet gaming operators in Ontario. Review the full document including annexes.

AGCO Advertising Standards for Internet Gaming: agco.ca/lottery-and-gaming/advertising-standards-internet-gaming. Standalone advertising standards applicable to all registered operators and their affiliates.

iGaming Ontario Operator Agreement: Available through the iGO operator portal at igamingontario.ca. Must be reviewed alongside the AGCO Standards. Legal review by counsel experienced in Ontario iGaming is strongly recommended.

AGCO Registrar’s Standards for Gaming (General): agco.ca/lottery-and-gaming/registrars-standards-gaming. Contains general registrant obligations that apply across gaming sectors, including provisions relevant to corporate fitness and probity.

Gaming Control Act, 1992 (Ontario): The primary legislation under which the AGCO operates and from which its registration and enforcement powers derive. Available through the Ontario e-Laws registry at ontario.ca/laws.