CCO
Health, gaps and deadlines across licences, with a board-ready report.
Intudly Compliance OS · for online casino & sportsbook operators
The compliance operating system for online casinos.
Intudly monitors regulators in your markets, maps each change to your licences and policies, finds gaps across documents, systems and campaigns, and helps your team prove how each decision was handled.
- Detect
- Map
- Fix
- Prove
For licensed multi-market operators. Start with CSV/SFTP or API workflows: Campaign Shield, launching Q1 2027, targets a first live check within 14 days, subject to your data and policy readiness.
The problem
Ten markets mean ten rulebooks, and no shared passport.
Online gambling has no EU-wide licence passport. An operator in ten markets maintains ten sets of terms, AML procedures, safer-gambling controls and marketing rules — and every one keeps moving.
| Market | Change |
|---|---|
| Great Britain | Age-based online slot stake limits (£2 for 18–24, £5 for 25+); statutory levy of around 1% of gross gambling yield4 |
| Germany | €1 maximum stake per spin; €1,000 monthly deposit limit across operators4 |
| Netherlands | Age-based monthly loss limits; sports sponsorship ban since 1 July 20254 |
| Italy | New nine-year online licences at €7M and 25% tax on gross gaming revenue4 |
| Finland | Market opens to licensed private operators in early 20274 |
| Curaçao | Direct licensing by the Curaçao Gaming Authority; local substance required from 1 January 20265 |
| European Union | AML Regulation applies from 10 July 2027, with CDD at €2,000 in stakes or winnings3 |
£2.47M
UKGC penalties for three operators in March 2025, for AML policies over-reliant on financial thresholds, delayed enhanced due diligence and ineffective customer interaction.1
What breaks in practice
- • Regulatory updates read late, by email, by one person
- • Policies updated, but the platform not reconfigured
- • CRM campaigns built faster than Compliance can review
- • Evidence scattered across inboxes, drives and tickets
Market changes summarise third-party reporting listed under Sources; confirm against primary regulatory sources before relying on them.
Platform overview
One platform, four jobs, twelve modules.
Every module shares the same data — licences, markets, policies, rule packs and evidence. Campaign Shield launches first; the rest arrive in stated phases.
01 · DETECT
Know what changed
Regulatory Radar
Regulators, laws, guidance and consultations, scored for relevance to your licences.
Roadmap · Phase 2 · Q2 2027Enforcement Intelligence
Published penalties against other operators, mapped to your own controls.
Roadmap · Planned · H2 2027Command Center
Health score, gaps and deadlines for every market.
Roadmap · Phase 2 · Q2 2027
02 · MAP
Know what applies
Market Access Matrix
Where you may operate, and whether geo-blocks and payment rules match.
Roadmap · Planned · H2 2027Obligations Map
Every obligation per licence, traced to its source.
Roadmap · Planned · H2 2027Market-Entry Accelerator
Gap analysis and first drafts for counsel when you enter a new market.
Roadmap · Planned · H2 2027
03 · FIX
Close the gaps
Policy & T&C Gap Engine
Tracked redlines for policies, procedures and terms.
Roadmap · Planned · H2 2027Campaign & Affiliate Shield
Pre-launch checks for copy, bonuses and audiences (MVP). Affiliate checks follow in Phase 3.
Launch · MVP · Q1 2027Player Risk Check
Explainable AML, RG and fraud risk scores per player, for human review.
Roadmap · Phase 2 · Q2 2027
04 · PROVE
Show it worked
Remediation Board
Gaps become owned tasks in Jira or Linear, closed with evidence.
Roadmap · Phase 2 · Q2 2027Audit Room
Mock audits, readiness score and export-ready evidence packs.
Roadmap · Planned · H2 2027Vendor Gatekeeper
Game and payment supplier certificates and contract clauses.
Roadmap · Planned · H2 2027
Compliance Copilot (Phase 2 · Q2 2027) is planned to run across modules, answering only from your policies, your rule packs and verified regulatory sources — with a citation for every sentence, or no answer. The separate Ask AI page on this site is a general demo, not the Copilot.
End-to-end example
One thread from regulatory change to verifiable proof.
A worked example: a market tightens loss limits for young adults. Regulation → obligation → gap → task → evidence; an auditor can follow it in either direction.
1 · Detect
Radar picks it up
The regulator's update is captured, summarised and scored High because you hold that licence and offer slots.
RAD-NL-2026-0917
2 · Map
Obligations update
Two existing obligations change and one is added, each linked to the exact provision and the brands it binds.
OBL-NL-RG-017
3 · Assess
Gaps found
The RG policy, the limit configuration and an active CRM campaign are flagged, with suggested redlines.
GAP-0412 · 0413 · 0414
4 · Fix
Owned tasks
Gaps become tasks for Compliance, Product and CRM, synced to Jira, each with acceptance criteria and a due date.
COMP-171 · 172 · 175
5 · Prove
Evidence sealed
Approved policy, configuration screenshot and the campaign's sealed record are linked to the original update.
EV-2291 · sealed
Rules first, AI second
Structured data and fixed rules do the predictable work. AI reads, summarises and drafts, and every output cites its source.
People sign off
Nothing changes in your policies or systems without a named approver. Intudly suggests; your team decides.
No citation, no finding
A finding without a traceable source is not shown.
Identifiers are sample data. Most of this thread uses Phase 2 and 3 modules; Phase 1 covers the campaign part.
Launch · MVP · Q1 2027
Campaign Shield · the launch module
Start with the first campaign. A low score never cancels a mandatory restriction.
- 01
Submit
CRM uploads copy, bonus terms, channel, markets and a pseudonymised audience via CSV/SFTP, API or Slack/Teams.
- 02
Check
Hard gates run first. Then cited findings and an explainable risk score that sets review priority.
- 03
Fix
Automatic exclusions apply; missing terms such as an expiry date need a person — nothing commercial is invented.
- 04
Approve
A separate Compliance checker approves the exact version. Blocked campaigns can't be sent for approval.
- 05
Prove
A sealed decision record is kept and reconciled against the actual send log.
Who it's for
Each role sees the work it owns.
MLRO
AML obligations, player risk and source-of-funds cases, with need-to-know visibility.
Head of Legal
Redlines, obligations and market entry, with first drafts for counsel.
RG Lead
Harm markers, limits and customer interactions tied to obligations.
CRM & Marketing
Campaign and affiliate pre-checks with clear fixes before the send.
Product
Configuration tasks with clear acceptance criteria, in Jira or Linear.
Trust, security & methodology
Rules first, AI second. People sign off.
Security items below are product and security design commitments, not independently verified certifications.
Principles
- No citation, no finding
- A low score never cancels a mandatory restriction
- Missing data is UNKNOWN, never eligible
- Nobody approves their own work
- Describe risk, never diagnose a player
- Decision support, not legal advice
Security design commitments
- EU hosting, optional dedicated tenant (Enterprise)
- Pseudonymised player IDs, no identity documents
- Encryption in transit and at rest
- Customer data is not used to train AI models
- Maker / checker roles; AML detail on a need-to-know basis
- Hashed, time-stamped evidence and audit records
- SSO / SAML (Professional), SCIM and MCP (Enterprise)
- Controls designed for ISO/IEC 27001; certification on the roadmap
Regulatory basis of the design: granular marketing consent (UKGC LCCP SR 5.1.12) · clear significant conditions for bonuses (CAP / ASA) · data minimisation, human involvement, processor terms and security (GDPR Art. 5, 22, 28, 32).
Value model · illustrative
What a Professional subscription could return — with your numbers.
Starts from a worked example for a mid-size operator. Change any assumption; the results stay illustrative.
Illustrative · based on your inputs
- Bonus leakage avoided (cash)
- €57,600
- Review capacity released (time, not cash)
- €118,800
- Counsel spend reduced
- €16,000
- Total annual value
- €192,400
- Annual subscription
- €46,800
- Value / cost
- 4.1×
Not a guarantee. Review capacity is time your team gets back, not necessarily a cash saving. Avoided fines are excluded because they cannot be forecast. Worked example: 6 markets, 80 campaigns, 3.0 → 0.75 hours, €55/hour, €400,000 monthly bonus spend, 2% leakage, 60% prevented, €40,000 counsel spend, 40% replaced.
Plans
Priced by markets and modules, not by seats.
Essentials
Monitoring and pre-launch checks for a growing operator.
€1,490 / month
billed annually · €17,880 / year
- Up to 3 markets · 1 brand · 5 users
- Regulatory Radar with alerts
- Command Center
- Campaign Shield: content, T&C and audience checks
- Compliance Copilot
- Up to 100,000 player records / month
- CSV, API, Slack / Teams
- 24-month evidence vault
Professional
RecommendedThe full compliance workflow for multi-market operators.
€3,900 / month
billed annually · €46,800 / year
- Up to 10 markets · 3 brands · 20 users
- Everything in Essentials, plus:
- Market Access Matrix with config sync
- Obligations Map & Policy Gap Engine
- Player Risk Check Score
- Affiliate & marketing shield (150 pages)
- Remediation Board with Jira / Linear
- Up to 500,000 player records / month
Enterprise
For groups with many brands, licences and suppliers.
from €8,900 / month
billed annually · from €106,800 / year
- Unlimited markets, brands and users
- Everything in Professional, plus:
- Enforcement Intelligence
- Audit Room with 2 mock audits / year
- Vendor Gatekeeper
- SSO / SAML, SCIM, MCP and custom API
- Dedicated EU tenant · 7-year retention
- Named CSM · SLA · custom rule packs
Prices in EUR, excluding VAT. Monthly billing +15%. No setup fee. A player record is one unique pseudonymised ID per month; re-checks never use extra quota. Modules become available as their phase ships — see the roadmap. MVP customers keep their Founding Operator discount when they upgrade.
Add-ons: Market-Entry Accelerator €12,500 per market (one-off) · Extra mock audit €4,900 · Extra market €250 / month · Extra 250,000 player records €490 / month · Extra 100 affiliate pages €190 / month.
Roadmap
Start with the MVP. Grow into the full platform.
Each phase is useful on its own. Phases 1 and 2 are planned to land before the EU AML Regulation applies on 10 July 2027. Nothing below is generally available yet.
Phase 1 · MVP · Q1 2027
Campaign Shield (MVP)
- • Content, T&C and audience checks
- • Campaign risk score & review queue
- • Hard gates, UNKNOWN fail-safe, maker / checker
- • Sealed decision records, send-log reconciliation
- • CSV / SFTP, API, Slack / Teams
Phase 2 · Q2 2027
Risk & workflow
- • Player Risk Check Score
- • CRM and PAM connectors
- • Remediation Board with Jira / Linear
- • Regulatory Radar and Command Center
- • Compliance Copilot
Phase 3 · Planned H2 2027
Full Compliance OS
- • Obligations Map & Policy Gap Engine
- • Market Access Matrix
- • Affiliate shield & Enforcement Intelligence
- • Audit Room, Vendor Gatekeeper
- • Market-Entry Accelerator
Week 1
Licences & markets
Brands, domains, roles · Radar scope and alerts
Week 2
Policies & obligations
Import and map policies · first gap report
Week 3
Integrations
CRM, PAM, Jira, Slack · config sync and backtest
Week 4
Go-live & training
Team training by role · first board report
Planned 30-day full-platform onboarding once the relevant phases ship. Campaign Shield alone targets 14 days to a first live check.
FAQ
Questions compliance teams ask first.
See what your last three campaigns would have flagged.
Free backtest of three recent campaigns, or a 30-minute walkthrough on a sample operator configured for your markets. We reply to agree scope and a secure way to share files.
Sources
- CMS Law, “Gambling Commission action on AML and SR failings in 2025” (AG Communications, Football Pools, Corbett Bookmakers, March 2025).
- iGamingToday, “The cost of gambling compliance in 2025”.
- Regulation (EU) 2024/1624 (AMLR), applicable from 10 July 2027; European Gaming, 16 July 2026.
- EU Reporter, “Major European markets tighten iGaming laws: what to expect in 2026”, 29 April 2026.
- Zitadelle AG, “Curaçao iGaming licence 2026: LOK reform”.
Screens show an illustrative interface with sample data for a fictional operator; rule IDs and policy clauses are examples. Third-party names are trademarks of their owners; mention does not imply partnership.