The channel regulators could not see
For most of online gambling's history, affiliates were invisible to regulators. A licensed operator was accountable for its own advertising; the sites that sent it customers were third parties with no licence, no obligations and, often, no identifiable owner. They could say what the operator could not, target whom the operator could not, and promote unlicensed competitors alongside licensed ones. When a regulator found a misleading bonus page or an advert aimed at children, the operator's answer was that an affiliate had done it.
That answer stopped working in the second half of the 2010s, and the way it stopped working is the foundation of everything in this course. Regulators did not, for the most part, start licensing affiliates. They made the operator responsible for them. A licensed operator's marketing rules were extended to cover marketing done on its behalf by anyone, the operator was required to contract with, approve, monitor and, if necessary, terminate its affiliates, and the penalty for an affiliate's breach landed on the operator's licence. Britain's Gambling Commission led: its first financial penalty for advertising failings, in 2017, was a £300,000 fine on BGO Entertainment for misleading promotions on its own and its affiliates' websites, and its licence conditions now state that licensees are responsible for the actions of third parties they contract with, with the power to terminate affiliates that breach an advertising code; other European regulators followed; and several regulated American states, arriving later, went further and licensed affiliates directly.
Two models of affiliate regulation
Every regulated market now uses one or both of two approaches.
Operator responsibility. The affiliate is not licensed, but the operator is liable for what the affiliate does in its name. The operator must have written terms with each affiliate, must approve marketing before it runs, must monitor it, must be able to identify every affiliate and sub-affiliate, and must end the relationship when rules are broken. The regulator enforces against the operator; the operator enforces against the affiliate. Britain, most of Europe and Ontario work this way. Ontario adds a market-exclusivity rule: operators must ensure that the affiliates they pay do not also promote online gaming sites that take bets from Ontario players without an AGCO registration (Registrar's Standard 1.21).
Direct licensing or registration. The affiliate must hold a licence, registration or certificate from the regulator before it can be paid by a licensed operator, with fit-and-proper checks on its owners, fees, reporting and the regulator's own enforcement powers over it. American states with online gambling, such as Pennsylvania, work this way, with the licence type depending on how the affiliate is paid: in Pennsylvania an affiliate paid a revenue share must be certified as an interactive gaming service provider, while one paid a flat fee must be registered.
Under either model the practical outcome is the same: an affiliate that wants to earn from licensed operators in a regulated market must follow that market's marketing rules, be identifiable, and accept oversight. The difference is who holds the file.
What regulators are worried about
The rules make sense once the harms behind them are understood, and the harms are the same in every market.
Misleading offers. Bonus pages that omit wagering requirements, expiry dates or maximum wins; "free" offers that are not; terms that change after the click. The single most common affiliate breach and the reason bonus content is the most regulated content an affiliate produces.
Vulnerable audiences. Content that reaches or appeals to under-18s; targeting of self-excluded people, most notoriously through pages built around "casinos not on the national exclusion scheme"; content aimed at people in financial difficulty.
Unlicensed promotion. Affiliates promoting operators that hold no licence in the reader's market, which is the affiliate industry's original business and the one regulated markets most want to end. A licensed operator whose affiliate also promotes unlicensed competitors is, in several regulators' eyes, funding the black market.
Undisclosed commercial relationships. Reviews and rankings that present themselves as independent while being paid for by the operators they rank. A consumer-law problem as well as a gambling one.
Responsible gambling failures. Missing age warnings, helpline information and messaging; content that presents gambling as a way to make money or solve problems; encouragement of chasing losses.
Data. Tracking and sharing customer data without a lawful basis, which is a data-protection problem that regulators in Europe have begun to treat as part of gambling compliance.
The consequences of getting it wrong
For an operator: a regulatory settlement or penalty, licence conditions, and in serious cases a licence review. In Britain the Commission and the Information Commissioner's Office treat the operator as primarily responsible for breaches by affiliates it uses for direct marketing, including marketing sent to self-excluded people, which must be reported as a key event. Operators have responded by cutting affiliate numbers, terminating the non-compliant and requiring evidence of compliance before onboarding.
For an affiliate under operator responsibility: termination by the operators it works for, and often by others once the breach becomes known, because regulators publish their enforcement decisions. Loss of accrued revenue share where the contract allows it. And, in markets where the promotion of unlicensed gambling is itself an offence, prosecution.
For an affiliate under direct licensing: fines, licence suspension or revocation by the regulator, with the same commercial consequences on top.
The asymmetry is worth stating plainly: an operator can survive an affiliate compliance failure; an affiliate often cannot survive being the failure.
How the rules reach an affiliate
An affiliate encounters the rules through three documents.
The operator's affiliate agreement, which incorporates the operator's licence obligations and passes them down: the marketing standards, the approval process, the prohibited markets, the audit rights and the termination rights. Under operator responsibility this contract is the enforcement mechanism.
The market's advertising code and gambling rules, which apply to the affiliate's content directly in most markets regardless of any contract: the advertising standards body's code, the regulator's marketing conditions, consumer law on disclosure and misleading claims.
The affiliate's own licence conditions, where it holds one: reporting, fit-and-proper obligations, the regulator's power to inspect.
An affiliate's compliance function exists to know all three for every market it operates in and to make sure its content, channels and partners meet them. The rest of this course is the content of that knowledge, market by market, and then the function itself.
What this course covers
Lesson two is the United Kingdom, the reference regime and the one whose enforcement history shaped the others. Lesson three is the United States, where direct licensing is the norm and the rules differ state by state. Lesson four is Europe, from the outright bans to the registration regimes. Lesson five is Brazil, Ontario and Australia, three markets whose rules have reshaped affiliate economics recently. Lesson six is the mechanics: contracts, approval, monitoring, enforcement and data protection. Lesson seven is building an affiliate compliance function and the accreditation and industry-standards landscape around it.
The through-line is that affiliate compliance is not a constraint on the business; in a regulated market it is the licence to be in the business at all, and the affiliates that treat it that way are the ones operators still pay.