Gaming Commission AML/KYC Requirements: A State-by-State Comparison

## The US Gaming Regulatory Landscape ### The Patchwork Nature of US Gaming Regulation The U.S. has no unified national framework for online gaming regulation. While federal law establishes baseline requirements, individual states maintain licensing and regulatory authority, creating a decentralized system where each gaming commission operates independently. This means multi-state operators must navigate 50 different regulatory frameworks covering [age verification](https://www.jumio.com/use-case/age-verification/), identity verification and KYC, AML compliance, geolocation verification, [responsible gaming](https://www.jumio.com/everything-you-need-to-know-about-responsible-gaming-faqs/) measures, and self-exclusion programs. What satisfies New Jersey’s requirements may fall short in Pennsylvania. Michigan’s standards differ from Nevada’s. For operators, compliance isn’t a one-time checkbox; it’s an ongoing commitment to understanding and adapting to diverse state requirements. ### Why Compliance Matters Gaming compliance failures result in severe consequences, including financial penalties reaching millions of dollars, license suspension or revocation, payment processor termination, and lasting reputational damage. Gaming commissions wield significant enforcement authority. Violations involving underage gambling, inadequate identity verification, or AML failures regularly trigger enforcement actions. Payment processors require active, compliant licenses, and regulatory issues often trigger termination clauses, making it impossible to process transactions. As online gaming expands, regulatory scrutiny intensifies. In particular, states that have recently legalized gambling tend to enforce gaming laws aggressively, so online gaming operators must be prepared for serious oversight. ### Core Compliance Requirements Across States Despite variations, certain requirements appear consistently across jurisdictions: - **Age verification is universal (but varies):** Some states permit gaming at 18, whereas most states require players to be 21 or older. Operators must [verify age](https://www.jumio.com/industries/gaming/) at registration and implement ongoing monitoring. - **Identity verification and KYC:** These regulations require authentication of government IDs, verification that the person presenting the ID matches the claimed identity, and validation of key information. Many states mandate [biometric verification](https://www.jumio.com/biometrics/) including selfie matching with liveness detection. - **AML compliance:** Requires screening against sanctions lists, monitoring for suspicious transaction patterns, and reporting obligations when thresholds are exceeded. - **Geolocation verification:** Ensures players are physically located within state boundaries using GPS, IP analysis, and other methods. **Responsible gaming measures:** Protect vulnerable players through deposit limits, time-based restrictions, and access to problem gambling resources. - **Self-exclusion programs:** Require integration with state databases, preventing excluded individuals from creating accounts. ## Federal Framework and Industry Standards ### Federal Regulations Affecting Gaming While states lead gaming regulation, federal law also establishes frameworks that affect all operators: - **The Indian Gaming Regulatory Act (IGRA):** Governs tribal gaming, creating a distinct regulatory path. Many states include tribal partnerships, requiring compliance with both IGRA and state requirements. - **The Unlawful Internet Gambling Enforcement Act (UIGEA):** Prohibits accepting payments connected with unlawful internet gambling, creating obligations around payment processing. - **The Bank Secrecy Act (BSA):** Establishes federal AML requirements including customer due diligence, suspicious activity reporting, and recordkeeping. - **The Wire Act:** Prohibits certain betting activities over interstate wires. Operators must structure offerings to comply, typically ensuring all gaming activity occurs within individual state boundaries. ## State-by-State Regulatory Comparison The following table provides a quick reference for understanding which states have legalized various forms of online gaming, their regulatory authorities, and minimum age requirements: | State | Online Casino | Sports Betting | Regulatory Body | Min Age | | --- | --- | --- | --- | --- | | New Jersey | ✓ | ✓ | NJ Division of Gaming Enforcement | 21 | | Pennsylvania | ✓ | ✓ | PA Gaming Control Board | 21 | | Michigan | ✓ | ✓ | MI Gaming Control Board | 21 | | Delaware | ✓ | ✓ | DE Lottery / Division of Gaming | 21 | | West Virginia | ✓ | ✓ | WV Lottery Commission | 21 | | Connecticut | ✓ | ✓ | Dept of Consumer Protection | 21 | | Rhode Island | ✓ | ✓ | RI Dept of Business Regulation | 18 | | Nevada | Limited | ✓ | NV Gaming Control Board | 21 | | New York | | ✓ | NY State Gaming Commission | 21 | | Colorado | | ✓ | CO Division of Gaming | 21 | | Arizona | | ✓ | AZ Department of Gaming | 21 | | Illinois | | ✓ | IL Gaming Board | 21 | | Tennessee | | ✓ | TN Education Lottery | 21 | | Virginia | | ✓ | VA Lottery | 21 | | Indiana | | ✓ | IN Gaming Commission | 21 | ### States with Live Online Casino Gaming - New Jersey - Pennsylvania - Michigan - Delaware - West Virginia - Connecticut - Rhode Island #### New Jersey **Regulatory body:** New Jersey Division of Gaming Enforcement (DGE) **Minimum age:** 21 **Key requirements:** Comprehensive identity verification at registration, ongoing monitoring, geolocation verification, AML screening, self-exclusion program integration, and detailed recordkeeping. **Unique considerations:** New Jersey pioneered online casino gaming in 2013 with one of the most established frameworks. The DGE’s requirements often set precedents that other states follow. #### Pennsylvania **Regulatory body:** Pennsylvania Gaming Control Board (PGCB) **Minimum age:** 21 **Key requirements:** Initial and ongoing identity verification, document authentication, responsible gaming commitments, financial transaction monitoring, and comprehensive audit trails. **Unique considerations:** Pennsylvania charges some of the highest licensing fees and maintains robust enforcement. The state’s large market justifies the investment. #### Michigan **Regulatory body:** Michigan Gaming Control Board (MGCB) **Minimum age:** 21 **Key requirements:** Identity verification with government-issued ID, selfie verification, address verification, AML compliance screening, and geolocation verification. **Unique considerations:** Large, competitive market with clear regulatory guidelines. The MGCB provides detailed technical specifications and enforces strictly. #### Delaware **Regulatory body:** Delaware Lottery (Division of Gaming) **Minimum age:** 21 **Key requirements:** Identity document verification, age verification protocols, player protection measures, and transaction monitoring. **Unique considerations:** First state to legalize online casino gaming in 2012. The lottery-operated model creates unique operational considerations. #### West Virginia **Regulatory body:** West Virginia Lottery Commission **Minimum age:** 21 **Key requirements:** Identity verification at account opening, ongoing compliance monitoring, responsible gaming features, and AML screening. **Unique considerations:** Market continues evolving with regulations adapting to industry growth. #### Connecticut **Regulatory body:** Department of Consumer Protection, Gaming Division **Minimum age:** 21 **Key requirements:** Tribal and commercial partnership model, strong identity verification, liveness detection for authentication, and comprehensive KYC processes. **Unique considerations:** Hybrid model involving both tribal and commercial operators with dual regulatory oversight. #### Rhode Island **Regulatory body:** Rhode Island Department of Business Regulation **Minimum age:** 18 **Key requirements:**