The layer that trips new entrants
An operator arriving in a new market usually prepares thoroughly for licensing and technical compliance, and then breaches the conduct rules in its first quarter. The reason is structural: licensing is a project with a deadline and an owner, while conduct rules govern the ordinary daily behaviour of marketing, CRM, affiliates and support, which are the functions least likely to have read the local framework.
Conduct rules are also the area with the widest variation between markets. Technical standards converge, because the same testing houses serve everyone. Advertising rules do not converge at all, because they follow national politics.
Advertising restrictions, by type
Knowing the categories lets you ask the right questions of local counsel rather than discovering the answers by enforcement.
Total or near-total prohibition. Some markets prohibit gambling advertising outright, permitting only limited informational content. Italy's 2018 Dignity Decree, for example, bans any form of advertising, direct or indirect and on any medium, for games and bets with cash prizes, and from 1 January 2019 extended the ban to sponsorship. Where this applies, customer acquisition depends almost entirely on organic presence, affiliates where they are permitted, and brand carried over from retail.
Channel restrictions. Bans or limits on television, radio, outdoor, online display, social media or influencer content, frequently differing between channels in the same framework.
Time restrictions. Watersheds prohibiting broadcast advertising before a given hour, and restrictions around live sport, of which the best known form prohibits gambling advertising from shortly before a match until shortly after it. In Britain the industry advertising code keeps most gambling advertising off television before 9pm and, within its exemption for live sport, bars pre-watershed betting adverts from five minutes before the event begins until five minutes after it ends; Australian broadcast rules bar gambling advertising between 5.00am and 8.30pm from five minutes before the scheduled start of play until five minutes after it.
Content restrictions. Rules on what an advertisement may depict or claim: prohibitions on suggesting gambling is a solution to financial problems, on giving an irresponsible perception of risk or control, on presenting gambling as a route to social success, on creating an inappropriate sense of urgency and on any appeal to people below the legal age. In Britain these appear in the CAP Code's gambling rules and in CAP guidance that restricts "Bet Now!" offers during live events and claims such as "Risk Free Deposit Bonus". Many frameworks also prescribe mandatory warnings and their prominence.
Participant restrictions. Limits on using sports figures, celebrities, or anyone with appeal to minors. In Britain no one whose example under-18s are likely to follow may appear, and no one who is or seems to be under 25 may be featured gambling or playing a significant role, subject to a narrow exception on an operator's own betting pages.
Sponsorship restrictions. Rules on shirt sponsorship, stadium naming and competition sponsorship, which have moved substantially in several markets and continue to move. Premier League clubs, for instance, agreed in April 2023 to withdraw gambling sponsorship from the front of matchday shirts from the end of the 2025/26 season, a voluntary measure rather than a legal one.
Bonus and offer restrictions. Rules on how promotions may be described, whether "free" may be used where a wagering requirement applies, where terms must appear, and in some markets caps or prohibitions on certain offer types entirely. Since 19 January 2026 British licence conditions cap wagering requirements at 10 times and ban incentives that combine more than one type of gambling product, such as betting and casino.
Targeting restrictions. Requirements to exclude self-excluded customers and, in some frameworks, customers showing risk indicators, from all marketing. Some markets extend this to age-based audience targeting: in Britain adverts must not be directed at under-18s through the selection of media or context, and the industry code requires paid-for digital adverts to be targeted at people aged 25 and over where the platform offers a 25+ filter.
The practical rule for a new market is that the marketing plan needs local legal sign-off before creative is produced, not after, because the restrictions frequently determine the channel mix rather than merely the copy.
Affiliates are your responsibility
In most modern frameworks the licensee is responsible for the conduct of anyone marketing on its behalf. That includes affiliates, and in several markets it explicitly includes their advertising claims, their use of bonus terminology, their targeting and their own compliance with the advertising code. In Britain, for example, licensees are responsible for the actions of third parties they contract with and must be able to terminate an affiliate that breaches an advertising code, and the CAP Code's gambling rules expressly cover affiliate marketers acting on an advertiser's behalf.
It is a common source of avoidable enforcement for a new entrant, because affiliate programmes scale fast and are managed commercially rather than legally.
Four controls make the relationship defensible.
Contract properly. The affiliate agreement should require compliance with the local framework by name, require approval of creative, permit audit, and allow immediate termination and withholding of commission for breach.
Approve creative in advance for the markets where it matters, and maintain a library of approved assets so affiliates have a compliant option that is easier than inventing one.
Monitor actively. Search for your own brand plus common non-compliant terms. Review affiliate landing pages periodically. Where the market restricts specific claims, search for those claims. It is a modest, recurring task, and it finds most problems before a regulator does.
Act on breaches. An operator that documented a breach, issued a warning and continued paying commission has evidenced that it knew and tolerated. Termination has to be a real possibility for the contract to mean anything.
There is a related trap. Affiliates frequently operate across several markets from one site, and content compliant in one jurisdiction may be visible in another where it is not. Geotargeting of affiliate content is part of the compliance conversation, not a technical nicety.
Bonus terms and fairness rules
Consumer protection law and licence conditions usually converge on the same requirement: terms must be fair, clearly presented, and not used to deny a customer something they reasonably expected. In Britain the Competition and Markets Authority's 2016 to 2019 investigation secured undertakings from operators to make promotional terms clearer and fairer and to stop blocking withdrawals of customers' own money, and licence conditions require the significant conditions of any incentive to be shown prominently with the offer.
The provisions that attract most attention are predictable. Wagering requirements and how prominently they are disclosed relative to the headline offer. Maximum withdrawal caps on winnings derived from bonuses. Expiry periods. Game weighting, where play on some games contributes less to the requirement. Maximum stake restrictions while a bonus is active, particularly where breaching them voids winnings. Terms permitting the operator to void a bonus or confiscate winnings at its discretion, which consumer regulators have singled out: the CMA took action over potentially unfair rules restricting play strategies that firms relied on to deny customers a pay-out.
Two tests are worth applying internally before a promotion runs. Could a reasonable customer, reading the headline, form an expectation the terms then defeat? And is any provision that removes the customer's money at the operator's discretion capable of being applied consistently and evidenced?
The commercial reality is that aggressive bonus terms produce complaints, complaints produce regulator attention, and regulator attention in a new market arrives when your compliance history is being formed.
Complaints and dispute resolution
Most frameworks require an internal complaints process with defined timescales and a route to an independent dispute resolution body, with the licensee bound by or at least required to engage with the outcome. In Britain, for example, a customer must be able to refer a dispute to a free ADR entity if the operator has not resolved it within eight weeks.
Three things matter for a new entrant.
The local ADR body and its standards are not the ones you know. Its expectations on evidence, on timescales and on what constitutes a fair outcome will differ, and early adverse decisions are expensive in reputation as well as money.
Complaint volumes are a supervisory signal. Regulators receive data from ADR bodies and from customers directly (the Gambling Commission analyses complaints from operators' regulatory returns, its own contact centre and ADR providers), and a new licensee generating disproportionate complaints will be noticed regardless of how each one is resolved.
The commonest complaint categories are predictable and preventable: withdrawal delays caused by verification requested at cashout rather than at registration, which in July 2024 the Gambling Commission said remained the number one subject of complaints it received, bonus terms applied in a way the customer did not anticipate, account closures without explanation, and responsible gambling tools that did not work as described. Each is a process failure rather than a dispute, and each is fixable before launch.
Responsible gambling as a local requirement
Your existing responsible gambling framework is a starting point and will not be sufficient. The local requirements differ in ways that are specific and testable.
Expect variation in: which limits must be offered and whether any are mandatory or defaulted; the cooling-off period before a limit increase takes effect (in Britain, at least 24 hours); whether a national self-exclusion register exists and must be checked, at what points, and what the failure mode must be; reality check intervals and content; what customer interaction is required, at what triggers, and what evidence of it must be retained; whether financial risk or affordability assessment is required and at what thresholds; and what must be reported to the regulator.
The integration items with the longest lead time are the national exclusion register and any central player account system, and both belong in the technical plan from the beginning rather than in the compliance workstream alone. Germany, for example, requires online operators to connect to the OASIS exclusion file and the LUGAS central files that enforce cross-operator deposit limits and prevent parallel play.
Building conduct compliance into the operation
The durable answer is not a document. It is putting the constraint where the decision is made.
Marketing needs a market-by-market summary of what is permitted, in the form of rules a campaign manager can apply, not a legal memorandum. CRM needs the suppression logic enforced at the point of send, tested with a seeded account, on every channel. Affiliate managers need the monitoring routine in their calendar. Support needs scripts that comply with local complaint and tipping-off requirements; in the UK, tipping off is a criminal offence in the regulated sector. Product needs to know which mechanics are restricted before they are built for that market.
And someone has to own regulatory change for each market, because advertising rules in particular change frequently and usually with a short implementation window. An operator that finds out about a new restriction when a campaign is refused by a broadcaster has no monitoring function, which is the subject of the next lesson.