Turnkey Online Casino in 2026: The Operator's Stack Comparison Guide

Choosing a turnkey online casino solution in 2026 means evaluating an entire technology stack — platform, aggregator, payment layer, and compliance tooling — not just a single vendor. This guide cuts through the sales decks to show you where the real decisions, costs and risks live.

A turnkey online casino is a fully configured, operator-owned deployment — your own license, your own domain, your own player database — built on a vendor's pre-integrated technology stack. White-label, by contrast, puts you on a shared master license and shared infrastructure. The distinction is legally and commercially significant, and vendors frequently blur it in their marketing.

What exactly is a turnkey online casino, and how does it differ from white-label?

A turnkey online casino is a fully configured, operator-owned deployment — your own license, your own domain, your own player database — built on a vendor's pre-integrated technology stack. White-label, by contrast, puts you on a shared master license and shared infrastructure. The distinction is legally and commercially significant, and vendors frequently blur it in their marketing.

The clearest way to think about it: white-label is a franchise arrangement where the franchisor (the platform provider) holds the gambling license and you operate as a sub-licensee under their umbrella. You get to market quickly — sometimes in four to eight weeks — but you own very little. The player data belongs to the master license holder, your brand is built on someone else's compliance infrastructure, and if that master license gets suspended or the provider exits a market, your operation goes dark with it. I've seen this happen twice with Curaçao-licensed white-label networks, and the operators had almost no recourse.

Turnkey flips that model. You apply for your own license — Curaçao eGaming, MGA, Anjouan, or wherever your market strategy points — and the vendor builds and configures the platform stack on your behalf. You own the entity, you own the players, and you're responsible for compliance. The vendor's role is closer to a systems integrator than a franchisor. That means more setup complexity and a longer pre-launch timeline (typically three to six months for a properly licensed turnkey versus four to eight weeks for white-label), but the long-term business you're building is actually yours.

From a stack perspective, a genuine turnkey package in 2026 should include: the core casino platform and back-office, a game aggregator integration (or direct studio connections), a payment processing layer with at least one acquiring PSP and ideally crypto rails, a KYC/AML toolset, an affiliate management system, and a CRM or bonus engine. Providers like SoftSwiss (SOFTSWISS Casino Platform), EveryMatrix (CasinoEngine + MoneyMatrix), and Digitain offer this as a bundled deployment. The integration depth and the contractual flexibility of each layer is what you're actually comparing when you evaluate turnkey vendors — not the marketing brochure.

White-Label vs. Turnkey Online Casino — Key Differences
FactorWhite-LabelTurnkey
License ownershipShared master license (provider's)Operator holds own license
Player data ownershipProvider retains data rightsOperator owns player database
Time to launch4–8 weeks typical3–6 months (licensed)
Setup cost (est.)$15,000–$60,000$80,000–$350,000+
Ongoing feesHigher rev-share (30–50%)Lower rev-share or flat SaaS fee
Flexibility / customisationLimitedModerate to high
Regulatory riskTied to provider's complianceOperator is responsible
Brand / M&A valueLowSignificantly higher

Which turnkey casino platform providers should operators seriously evaluate in 2026?

The shortlist that consistently comes up in serious operator RFPs includes SoftSwiss, EveryMatrix, Digitain, BetConstruct, and Pragmatic Solutions. Each has a meaningfully different commercial model, API architecture and jurisdictional footprint. Picking the wrong one for your market is an expensive mistake that typically takes 18 months and a painful migration to correct.

SoftSwiss is probably the most recognized name for crypto-friendly turnkey deployments. Their platform handles both fiat and crypto natively, the back-office is mature, and their game aggregator (SOFTSWISS Game Aggregator) gives access to 200+ studios. The trade-off is that they're opinionated about their own ecosystem — deep integration with external PSPs outside their recommended stack can get friction-heavy, and their contracts historically lean toward locking you into their aggregator. For operators targeting crypto-heavy markets or building a BTC-first brand, it's a strong fit. For regulated EU markets where you need tight PSP flexibility, evaluate carefully.

EveryMatrix is the platform I'd recommend most seriously for operators targeting regulated European markets — MGA, UKGC, or emerging regulated jurisdictions. Their CasinoEngine aggregates 20,000+ games, MoneyMatrix handles the payment layer with genuine multi-PSP routing logic, and their compliance tooling (OddsMatrix, RGS Matrix) is built for regulator scrutiny. The onboarding process is slower and more thorough than some competitors, which is actually a feature rather than a bug when you're building a licensed operation. Pricing is enterprise-tier — expect meaningful monthly minimums.

Digitain and BetConstruct are strong contenders for operators who want sports betting bundled with casino from day one. Both are Armenian-founded companies with substantial global footprints, competitive pricing, and flexible API access. BetConstruct in particular has invested heavily in their compliance layer for regulated markets. The risk with both is support responsiveness at scale — worth stress-testing during due diligence by talking to existing operators on their platform, not just reading case studies. Pragmatic Solutions (separate from Pragmatic Play the studio) is worth evaluating for operators who want a leaner, API-first platform without the full-stack lock-in of the larger vendors.

Turnkey Casino Platform Comparison — 2026 Snapshot
ProviderBest fitGame aggregatorCrypto-nativeRegulated EU-readyEst. monthly platform fee
SoftSwissCrypto / offshoreSOFTSWISS Game Aggregator (200+ studios)YesPartial$10,000–$30,000+
EveryMatrixRegulated EU / MGACasinoEngine (20,000+ games)PartialYes$15,000–$50,000+
DigitainSports + casino comboProprietary + third-partyPartialPartial$8,000–$25,000+
BetConstructSports + casino / emerging marketsProprietary aggregatorYesPartial$8,000–$20,000+
Pragmatic SolutionsAPI-first / lean stackExternal aggregator integrationNoYesVariable / rev-share

How should operators evaluate game aggregators within a turnkey stack?

Your game aggregator choice determines content breadth, studio relationships, rev-share structure and — critically — which regulated markets you can actually serve. Most turnkey platforms bundle their own aggregator, but the better vendors let you integrate a third-party aggregator or layer one on top. That flexibility is worth negotiating for before you sign.

The aggregator market in 2026 is dominated by a handful of serious players: Relax Gaming, Pariplay (now part of Aristocrat), Hub88, Slotegrator, and the platform-bundled options from EveryMatrix and SoftSwiss. Each has a different studio roster, different certification coverage, and different commercial terms. Hub88, for instance, has built a strong reputation for regulated market certifications — if you're targeting MGA or UKGC, their compliance documentation is notably cleaner than some competitors. Relax Gaming is a studio-aggregator hybrid, which gives them premium content but also means they're selective about who they distribute to.

The number operators fixate on — total game count — is largely irrelevant. Nobody needs 15,000 slot titles. What matters is: are the top 50 performing studios present (Pragmatic Play, Evolution for live, Hacksaw Gaming, Push Gaming, Play'n GO)? Are the certifications current for your target jurisdiction? What's the revenue share structure and are there MGA or per-market fees baked in? A 30% aggregator rev-share on top of a 15% platform fee leaves you with margins that make the business model questionable before you've spent a dollar on marketing.

If your turnkey vendor bundles their own aggregator and makes it contractually difficult to add external content, that's a meaningful red flag. The casino content landscape shifts fast — studios release hit games that drive acquisition spikes, and if you're locked into an aggregator that's slow to onboard new studios, you'll feel it in your conversion numbers. I'd negotiate explicit rights to integrate at least one additional aggregator API within the first 12 months of operation as a baseline contractual requirement.

What does a turnkey online casino actually cost to launch in 2026?

All-in launch costs for a properly licensed turnkey casino in 2026 realistically range from $80,000 to $350,000+, depending on jurisdiction, platform tier, payment complexity and whether you're building any custom front-end. The $30,000 figures some vendors advertise are for white-label sub-licenses — not standalone licensed operations. Budget accordingly.

Breaking down the cost structure honestly: the gambling license itself is often the first surprise. A Curaçao eGaming license (now under the reformed GCB framework post-2023) costs roughly $30,000–$50,000 in application and setup fees plus ongoing annual fees, and you'll need a local entity and a management fee to a licensed service provider. An MGA license in Malta is more rigorous — budget $25,000+ in application fees, legal costs that routinely hit $50,000–$100,000, and a timeline of six to twelve months. Anjouan (OJSC) has emerged as a faster, cheaper offshore option at around $15,000–$25,000 all-in, though its market acceptance is narrower. These are ballpark figures; get current quotes from a licensed corporate service provider, because fee structures change.

Platform and technology costs on top of licensing: a mid-tier turnkey deployment on a platform like Digitain or BetConstruct typically involves a setup fee of $20,000–$60,000 plus monthly SaaS or rev-share fees. EveryMatrix and SoftSwiss deployments at the enterprise tier can have setup fees of $50,000–$150,000 with meaningful monthly minimums. Then layer in payment integration costs — PSP setup fees, rolling reserves (typically 5–10% of processing volume held for 90–180 days), and the ongoing cost of maintaining multiple PSP relationships as your primary inevitably experiences downtime or account termination.

Marketing and player acquisition is where operators most consistently underbudget. A turnkey casino with zero player base needs acquisition spend to generate revenue, and in competitive markets the cost per depositing player (CPD) can range from $150 to $600+ depending on channel and geography. Budget a minimum of $50,000–$100,000 for the first three months of acquisition before you can meaningfully evaluate whether the business model is working. The vendors selling you the platform have no incentive to tell you this — their revenue starts on day one regardless of your player acquisition results.

Estimated Turnkey Casino Launch Cost Breakdown (2026)
Cost CategoryLow EstimateHigh EstimateNotes
Gambling license (Curaçao/Anjouan)$20,000$55,000Ongoing annual fees additional
Gambling license (MGA)$75,000$150,000+Includes legal; 6–12 month timeline
Platform setup fee$20,000$150,000Varies by provider tier
Monthly platform fee (year 1)$96,000$360,000$8k–$30k/month range
Payment integration & reserves$10,000$50,000+Rolling reserve not a cost but cash tied up
Front-end design / custom dev$15,000$80,000If customising beyond default theme
Legal / compliance / KYC tooling$10,000$40,000AML policy, T&Cs, responsible gambling
Initial marketing budget (3 months)$50,000$150,000+Acquisition; highly market-dependent
TOTAL (est.)$221,000$835,000+Wide range reflects jurisdiction + tier

Which payment providers and PSPs actually work for a turnkey casino launch?

Payment is the single layer where most turnkey launches underperform. You need a primary card acquirer, a backup acquirer, a crypto processing option, and local APM coverage for your target market — and you need all of these contracted and tested before go-live, not after. Most platform vendors will offer a bundled PSP; treat it as a starting point, not a complete solution.

The iGaming PSP market in 2026 is fragmented and risk-sensitive. Card acquiring for gambling merchants is genuinely difficult — Visa and Mastercard's merchant category code (MCC 7995) triggers enhanced scrutiny, higher interchange, and frequent account terminations. Established iGaming-specialist acquirers include Payvision (ING), Nuvei, Praxis Cashier (a payment orchestration layer rather than an acquirer), and Safecharge (now part of Nuvei). For crypto, B2BinPay, CoinsPaid and BitPay are the most common integrations I see in turnkey deployments. CoinsPaid in particular has deep integrations with SoftSwiss and several other platform providers, which simplifies the technical lift.

The orchestration layer concept is worth understanding. Rather than integrating each PSP directly, tools like Praxis Cashier, Payneteasy, or EveryMatrix's MoneyMatrix sit between your platform and multiple PSPs, routing transactions based on geography, card BIN, and failure rates. This is how serious operators manage payment resilience — when your primary acquirer declines a batch of UK Visa transactions, the orchestration layer automatically re-routes to your backup without the player seeing a failure. Getting this architecture right at launch is significantly easier than retrofitting it after you've gone live with a single PSP and started seeing decline rates above 15%.

Local APMs (alternative payment methods) are non-negotiable in most markets. In LATAM, PIX in Brazil, PSE in Colombia, and OXXO in Mexico drive a substantial share of deposits — a casino targeting Brazilian players without PIX integration is leaving the majority of its addressable market untouched. In Europe, Trustly for bank transfers and Skrill/Neteller for e-wallets remain standard. In emerging Asian markets, local wallet integrations are table stakes. Map your target market's payment preferences before you finalize your platform choice, because some platforms have significantly better pre-built APM coverage than others, and custom integrations add both cost and timeline.

What jurisdictions should a turnkey casino operator target in 2026?

Jurisdiction selection in 2026 is a market access decision as much as a regulatory one. Curaçao and Anjouan remain the fastest and cheapest offshore entry points. MGA Malta is the gold standard for European credibility. US state licenses are individually required and operationally complex. LATAM — Colombia, Peru, Brazil — is where the most interesting regulated growth is happening right now.

Curaçao went through a significant regulatory reform in 2023–2024 under the new National Ordinance on Offshore Games of Hazard (NOOGH), moving from a sub-license model to direct operator licenses issued by the Gaming Control Board (GCB). The transition increased costs and compliance requirements meaningfully — the $5,000 Curaçao license of 2019 is a historical artifact. That said, Curaçao remains the most accessible offshore license for new operators, with a timeline of roughly three to five months under the new framework and a market acceptance that covers most of Latin America, parts of Asia and crypto-heavy player bases globally.

MGA Malta is the benchmark for operators targeting European players seriously. It's expensive, slow (six to twelve months realistically), and requires genuine substance in Malta — not just a letterbox company. But the MGA mark opens doors: better PSP relationships, higher player trust, and acceptance in markets that won't touch offshore operators. If your five-year plan includes any regulated European market or a potential acquisition/investment event, building on MGA from the start is the right call even if it's painful upfront.

For LATAM operators, Colombia (Coljuegos) and Peru (MINCETUR) are the two most developed regulated frameworks, both with established licensing processes and local payment infrastructure. Brazil's regulatory framework under the Secretaria de Prêmios e Apostas (SPA) is actively developing post-2023 legislation — by 2026, Brazil should have a clearer licensing pathway, and the market size justifies serious attention. Mexico's SEGOB framework is technically available but operationally complex; most operators serving Mexican players do so under Curaçao or Anjouan licenses targeting the grey market, which carries increasing regulatory risk as SEGOB enforcement has been inconsistent but not absent.

How does the API architecture of a turnkey platform affect long-term operator flexibility?

API architecture is the detail that separates a platform you can grow on from one you'll need to migrate off in 18 months. You want RESTful APIs with comprehensive documentation, webhook support for real-time event handling, and explicit contractual rights to build custom integrations. Vendors who restrict API access or charge per-call fees for basic back-office functions are building lock-in by design.

From my time on the platform PM side, the single most common operator complaint I heard post-launch was 'we can't integrate X because the platform API doesn't support it.' The vendors rarely advertise this limitation during the sales process. Before signing any turnkey contract, request the full API documentation — not a summary, the actual docs — and have a technical person review it against your integration wishlist. Specifically: does the player API support real-time balance updates and session management at the granularity you need? Does the bonus engine expose enough parameters to run the promotion mechanics you want? Can you pull raw event data for your own BI stack, or are you stuck with the vendor's reporting dashboards?

The CRM and bonus engine integration point is where I see the most friction. Most turnkey platforms include a basic bonus engine, but operators who want to run sophisticated lifecycle marketing — triggered free spins, deposit match ladders, loss rebates with custom eligibility logic — quickly hit the ceiling of what the native tooling supports. Platforms that expose a clean API to an external CRM (Optimove, Fast Track, or even a custom-built solution) give you a meaningful competitive advantage in player retention. Platforms that require you to use their proprietary CRM and won't expose the data are limiting your ability to compete on the one dimension that matters most after launch.

Webhooks and real-time event streaming deserve specific attention for compliance reasons. If your platform can't push real-time transaction and session events to your AML monitoring system, you're doing post-hoc compliance reviews instead of live monitoring — which is increasingly unacceptable to regulators and creates genuine legal exposure. EveryMatrix's architecture handles this well. Some of the smaller or older platform vendors are still running batch exports, which is a red flag for any operator targeting a regulated jurisdiction in 2026.

What compliance and KYC tooling should be built into a turnkey casino stack?

A turnkey casino in 2026 needs native or tightly integrated KYC, AML transaction monitoring, responsible gambling controls and geolocation blocking as non-negotiable stack components — not afterthoughts. Regulators across every major jurisdiction have raised the bar on what 'adequate compliance tooling' means, and the vendors who treat it as a checkbox are a liability.

KYC verification at the player level needs to be automated and fast. Manual document review at scale is both operationally expensive and creates friction that kills conversion. The standard integration pattern now is a platform-level connection to a KYC provider — Sumsub, Onfido, Jumio, or Veriff are the names I see most in operator stacks — with automated document OCR, liveness checks and sanctions screening. Sumsub in particular has strong iGaming-specific workflows and pre-built integrations with several major platforms. The cost is typically per-verification, ranging from $1.50 to $5.00 per check depending on volume and verification depth, which needs to be factored into your unit economics.

AML transaction monitoring is a separate layer from KYC. You need a system that flags unusual deposit patterns, structuring behavior, and high-velocity transactions in real time. Some platforms have basic rule-based monitoring built in; for MGA or any serious regulated jurisdiction, you'll need something more sophisticated — either a dedicated AML tool like ACAMS-certified software or a custom rule engine built on your event stream. The compliance officer requirement is also real: MGA requires a named, qualified compliance officer as a condition of license. Budget for this role, whether in-house or outsourced to a Malta-based compliance firm.

Responsible gambling (RG) controls — deposit limits, session limits, self-exclusion, cooling-off periods, reality checks — are mandatory in every regulated jurisdiction and increasingly expected even in offshore markets where regulators are tightening standards. Your platform must support these at a technical level, and they must be accessible to players without friction. UKGC has set the benchmark here; even if you're not targeting UK players, building to UKGC-level RG standards protects you as the regulatory tide continues to rise globally. Geolocation blocking is table stakes — IP-based blocking supplemented by GPS verification for mobile is now standard, and any platform that can't enforce this reliably is a compliance risk you shouldn't accept.

How long does it realistically take to launch a turnkey online casino?

A realistic turnkey casino launch timeline — from signed contracts to live, licensed operation — is four to seven months for an offshore jurisdiction like Curaçao or Anjouan, and eight to fourteen months for a regulated jurisdiction like MGA Malta. Anyone promising you a fully licensed turnkey launch in six weeks is describing a white-label sub-license, not a standalone operation.

The timeline breaks into roughly three parallel tracks: licensing, platform configuration, and payment setup. Licensing is almost always the critical path. Curaçao's GCB under the new framework has been processing applications in roughly 60–90 days for straightforward applications with complete documentation, but delays are common and the timeline has stretched to 120+ days for applications with corporate structure complexity. Anjouan (OJSC) is faster — some operators have received licenses in 30–45 days — but the due diligence requirements are lighter, which is reflected in the market's perception of the license.

Platform configuration runs in parallel with licensing and typically takes six to twelve weeks for a standard turnkey deployment — longer if you're doing significant front-end customization or integrating non-standard third-party tools. The vendors will quote you four to six weeks; add 50% buffer for integration testing, content QA and UAT. Payment setup is consistently the track that causes the most delays, because PSP applications for gambling merchants involve underwriting processes that are outside your control. A PSP application submitted the same week as your platform contract can take four to ten weeks to approve, and rejections require starting over with a different provider. Submit payment applications early — before you've finalized the platform, if possible.

The go-live sequence matters too. Soft launch with a limited player base before full marketing push is standard practice and operationally important — it lets you stress-test payment flows, identify platform bugs under real load, and validate your KYC processes before you've spent heavily on acquisition. Build four to six weeks of soft launch into your timeline. Operators who skip this step and go straight to full marketing launch consistently encounter payment failures and compliance gaps at the worst possible moment.

What are the most common mistakes operators make when selecting a turnkey casino vendor?

The most expensive mistakes I see operators make are: choosing a platform based on demo aesthetics rather than API depth, underestimating PSP complexity, signing long-term contracts without migration clauses, and conflating the vendor's game count with actual content quality. Each of these is avoidable with proper due diligence — and each is consistently glossed over in vendor sales processes.

The contract term and exit clause issue is the one that causes the most long-term damage. Turnkey platform contracts typically run two to three years with auto-renewal clauses and data portability restrictions that make migration genuinely painful. I've seen operators discover — 18 months into a platform relationship that isn't working — that their player data is stored in a proprietary format with no export API, and that the contract requires six months' notice plus a data migration fee that runs to five figures. Before you sign anything, have a lawyer review the data ownership clauses, the termination provisions, and specifically what happens to your player database if you want to migrate. This is non-negotiable.

Underestimating the PSP complexity is the other consistent failure mode. Operators budget for one PSP integration, get it live, and then discover that their primary acquirer has a 25% decline rate on their target market's cards, or that the acquirer terminates the account three months in after a chargeback spike. The resilient payment stack — primary acquirer, backup acquirer, crypto rails, local APMs — needs to be built from day one, not retrofitted after the first payment crisis. The cost of building it properly upfront is significantly less than the revenue lost during a payment outage post-launch.

Finally: reference checks. Not the curated case studies the vendor sends you — actual conversations with three to five operators currently running on the platform. Ask them specifically about support response times when something breaks at 2am on a Saturday, about the real timeline between requesting a new integration and getting it live, and about any undisclosed fees that appeared after go-live. Vendors who are reluctant to provide unfiltered reference contacts are telling you something important about the experience of being their customer.

What operators say

★★★★★
The most operator-focused iGaming resource I have found — zero vendor spin.
N Nathan EllisCEO, casino group
★★★★★
Sharp, current analysis on payments and crypto rails. Genuinely useful.
M Mei L.Head of Growth, operator
★★★★★
Their licensing breakdowns are accurate and refreshingly direct.
O Oliver H.Compliance consultant

Frequently asked questions

What is the minimum budget to launch a turnkey online casino in 2026?
Realistically, $80,000–$150,000 gets you a basic licensed turnkey deployment on an offshore jurisdiction like Curaçao or Anjouan — covering license fees, platform setup, basic payment integration and minimal legal costs. That figure excludes ongoing monthly platform fees and marketing spend, both of which are substantial. Budget $250,000+ for a credible first-year operation including acquisition.
Is a turnkey online casino legal to operate?
Yes, provided you hold a valid gambling license from a recognized jurisdiction and comply with that jurisdiction's operating requirements. Legality also depends on which player markets you're targeting — operating without a local license in regulated markets like the UK, Germany or US states carries significant legal risk regardless of your offshore license.
How is a turnkey casino different from a white-label casino?
The core difference is license and data ownership. A white-label puts you on the platform provider's shared master license — you operate as a sub-licensee and the provider retains player data rights. A turnkey gives you your own standalone license and dedicated infrastructure. Turnkey costs more and takes longer to launch, but you own the business you're building.
Which gambling license is best for a new turnkey casino operator?
For offshore entry with the fastest timeline and lowest cost, Curaçao or Anjouan are the practical choices in 2026. For European credibility and PSP access, MGA Malta is the benchmark despite higher cost and longer timeline. Your target player market should drive the decision — a LATAM-focused operator has different licensing needs than one targeting European recreational players.
Can I accept cryptocurrency payments on a turnkey casino?
Yes. Crypto payment integration is standard in most turnkey platforms — SoftSwiss in particular has native crypto support, and providers like CoinsPaid and B2BinPay integrate with most major platforms. Regulatory treatment of crypto gambling varies by jurisdiction; confirm your license permits crypto transactions before building your payment stack around it.
How many games do I need to launch a competitive turnkey casino?
Quality over quantity. A launch catalog of 500–1,500 games from top-performing studios (Pragmatic Play, Evolution for live casino, Hacksaw Gaming, Play'n GO) will outperform a 10,000-game catalog of low-quality content. Focus on securing the studios that drive actual player engagement rather than maximizing raw game count.
What ongoing fees should I expect after launching a turnkey casino?
Expect monthly platform fees ($8,000–$30,000+ depending on provider tier), game aggregator rev-share (typically 15–30% of GGR from content), PSP processing fees (2–5% of transaction volume plus chargebacks), KYC per-verification costs, and license renewal fees annually. Total ongoing costs easily reach $20,000–$60,000+ per month before marketing.
Can I target US players with a turnkey casino?
Only with a state-specific license. US online casino regulation is state-by-state — New Jersey (DGE), Pennsylvania (PGCB), Michigan (MGCB), Connecticut and West Virginia are the currently licensed markets. Each requires a separate application, local entity, and significant compliance infrastructure. Targeting US players under an offshore license carries serious federal and state legal exposure.
How long does it take to get a Curaçao license for a turnkey casino?
Under the reformed GCB framework post-2023, straightforward applications are processing in roughly 60–90 days, though 90–120 days is more common with any corporate structure complexity. Budget for this timeline when planning your launch sequence and submit the application as early as possible.
Do I need a compliance officer for a turnkey casino?
For MGA Malta, yes — a named, qualified compliance officer is a licensing requirement. For Curaçao and Anjouan, the formal requirement is lighter but having a compliance function (in-house or outsourced to a specialist firm) is operationally necessary for AML policy, KYC oversight and responsible gambling compliance. Skipping it is a risk that regulators are increasingly willing to act on.