A one-size-fits-all gambling compliance strategy is a single set of policies, controls and product rules written once and deployed in every market an operator enters. It fails for a reason that has little to do with effort or budget: markets do not merely set different thresholds for the same obligations, they disagree about what counts as gambling in the first place. Get that classification wrong and every downstream control, from licensing to tax filings to self-exclusion, is pointed at the wrong rulebook. India is where this shows up most plainly, because there a single country runs dozens of parallel answers to the same question.
What a templated compliance approach actually looks like
The template usually starts as good practice. An operator or supplier builds its controls to satisfy its strictest licensing jurisdiction, then exports that package everywhere on the assumption that the toughest standard clears the lower bars automatically. Greentube’s director of group compliance, Roxanne Scicluna, made this argument in a G3 Newswire interview: designing for the strictest jurisdiction frequently creates more problems than it solves, and compliance tends to be either embedded in the product lifecycle or permanently catching up with it, sometimes both inside the same company.
The flaw is arithmetic. Regulatory requirements are not stacked on a single scale where one number is higher than another. A deposit cap mandated in one market may be prohibited as a dark pattern in a second, where limits must be player-set. An affordability check built on income verification may collide with another jurisdiction’s data-minimisation rules. Strictness is not transitive, so “we meet the hardest standard” is not an answer, it is an assumption waiting to be tested by a regulator.
The classification question most teams check last
Before licensing, before tax, before responsible gambling, a jurisdiction decides whether your product is a game of skill or a game of chance. That one classification determines whether gambling law applies to you at all. Indian courts have long worked on a predominance test, holding that games where skill substantially determines the outcome fall outside the prohibition on gaming: the Supreme Court treated rummy as predominantly skill-based in State of Andhra Pradesh v. K. Satyanarayana, and horse race betting similarly in Dr. K.R. Lakshmanan v. State of Tamil Nadu. Other jurisdictions reject predominance entirely and ask whether chance plays any material part.
So take one product and walk it through. A real-money rummy app is, on the Indian predominance line, arguably a skill game. In a market using a “material element of chance” test, the same app is gambling and needs a licence it does not have. The code is identical. The legal object it becomes is not. Teams that start their market-entry checklist at “which licence do we apply for” have already skipped the step that decides the answer.
What actually varies between licensing jurisdictions
Four structural drivers do most of the work, and each sits with a different authority.
Who grants the licence. Some markets license nationally through a single regulator. Others devolve the power to states, provinces or territories, which means several licences, several fee schedules and several supervisory relationships inside one country. A few operate monopoly or concession models where no private licence exists to apply for.
How the product is legally defined. The skill-versus-chance line above, plus narrower definitions: whether fantasy sports, prediction markets, loot boxes or crash games sit inside the gambling perimeter varies market to market and sometimes changes after a single court ruling.
Tax and reporting. Rates differ, but so does the tax base, which matters more. Gross gaming revenue, turnover, stakes and deposits are all used as bases somewhere. India applies 28% GST on the full face value of deposits for online money gaming and a 30% TDS on net winnings under Section 194BA of the Income Tax Act, both of which attach to how the activity is classified. Reporting cadence, suspicious transaction thresholds and AML and KYC documentation standards diverge alongside.
Consumer protection norms. Advertising rules, bonus terms disclosure, complaint handling and dispute resolution routes are set locally and often reflect domestic consumer law rather than gambling law.
| Compliance element | What typically varies | Where the rule usually comes from |
|---|---|---|
| Licensing | National, state or monopoly model; fees; number of licences needed | Gambling regulator or state legislature |
| Legal classification | Skill vs chance test; which formats fall inside the perimeter | Statute plus case law |
| Taxation | Tax base (GGR, turnover, deposits) and rate; withholding duties | Tax authority, separate from the regulator |
| AML and KYC | Verification timing, document standards, reporting thresholds | Financial intelligence unit or central bank |
| Responsible gambling | Limit mechanics, self-exclusion scope, advertising curbs | Regulator, advertising standards body |
India’s patchwork: one country, many rulebooks
Gambling in India sits on the State List of the Constitution’s Seventh Schedule, which gives individual states the power to legislate on betting and gambling within their own borders. The historical baseline is the Public Gambling Act 1867, a colonial-era statute that prohibits running and visiting common gaming houses while exempting games of mere skill. States have adopted, amended or replaced it, and several have written entirely their own frameworks.
Centre versus state, and why both matter
The practical consequence is that there has never been a single Indian gambling licence to hold. Sikkim and Nagaland built their own statutory regimes for online gaming, Goa and Daman permit land-based casinos under their own gambling legislation, and other states have moved to restrict or prohibit online real-money formats, in some cases prompting constitutional challenges in the High Courts. Central legislation has since entered the field, including the Promotion and Regulation of Online Gaming Act, 2025, which addresses online money gaming at national level while treating e-sports and online social games differently.
Anyone making commercial decisions should verify the current position for each state and the status of any pending litigation or rules under the central Act against primary sources such as India Code and the relevant state gazette. Indian gambling law has changed repeatedly in recent years, and nothing here is legal advice. What matters for the compliance argument is structural rather than current: a federal allocation of legislative power produces durable divergence, and a template built for one state was never going to hold for the next.
Where responsible gambling obligations part ways
Responsible gambling compliance diverges most on four mechanics: who sets deposit limits, how far self-exclusion reaches, when age and identity verification must complete, and what operators may advertise. Each is a genuine design decision, not a dial.
Self-exclusion is the clearest example. Some markets run a central register that blocks an excluded player across every licensed operator; others place the duty on each operator individually, which means an exclusion at one brand does nothing at the next. Deposit limits may be mandatory with statutory ceilings, mandatory but player-set, or merely available on request. Verification timing splits between markets requiring full KYC before the first deposit and those allowing play with verification completed before the first withdrawal. Advertising runs from near-total bans on gambling marketing to watershed hours, bonus-advertising prohibitions and affiliate registration duties.
The direction of travel is consistent even where the rules are not. Regulators across most mature markets have tightened these requirements rather than loosened them, which means an RG policy written three years ago is likely out of date somewhere in the portfolio right now.
Building a market-adaptive compliance strategy
- Map the authorities that actually bind you in each market: gambling regulator, tax authority, financial intelligence unit, advertising standards body, data protection regulator. They are rarely the same institution and rarely agree on timing.
- Classify every product under local legal definitions before anything else, and record the reasoning. The same game can be a skill game in one market and an unlicensed gambling product in another.
- Localise responsible gambling controls at the configuration layer, so limit mechanics, exclusion scope and verification timing can be set per market without a code release.
- Build regulatory-change monitoring with named ownership and a review cadence, covering case law and draft rules, not only enacted statutes. In federal systems, monitor at the sub-national level.
- Document jurisdiction-specific policies rather than one global policy with local annexes. Regulators audit against their own framework, and a document that reads as an afterthought is treated as one.
None of this removes the shared core. Record keeping, incident response and AML and KYC fundamentals travel well. The error is assuming the configurable layer is thin.
What uniform compliance costs when it fails
The consequences are ordinary and well documented across regulated markets generally: financial penalties, licence conditions, suspension or revocation, forced withdrawal from a market, payment partners dropping the account, and the reputational cost of being named in a regulator’s enforcement notice. Supplier relationships carry the exposure sideways, because an operator’s breach can put a provider’s own licence under review. Costs also land in the opposite direction, which is the point Scicluna makes: restrictions imported from a stricter market can push players toward unlicensed sites, weakening the protection the controls were built to deliver.
Designing for difference
Compliance maturity now looks less like a single excellent policy and more like a system that can hold several contradictory answers at once and apply the right one per market. The open question is how far that scales. There is no serious prospect of regulatory harmonisation across gambling markets, and for cross-border iGaming operators the cost of divergence keeps rising, which is likely to push smaller suppliers out of some jurisdictions entirely rather than toward better compliance.
If you are reading this as a player rather than an operator, the rule differences explain why limits, verification steps and available games change depending on where you are. Use the deposit limits, time-outs and self-exclusion tools your operator offers, treat gambling as paid entertainment with a built-in house edge rather than income, and seek support locally if it stops feeling that way.
