iGaming Advertising Compliance by Country: A 2026 Regulatory Map for Media Buyers

If you buy media for iGaming across borders, regulation is not a legal footnote. It is the single biggest variable in your cost of acquisition, your creative approval time, and your exposure to fines. A campaign that is textbook compliant in Malta can trigger enforcement in Italy, get your creative pulled in the United Kingdom, or leave the operator you promote holding a penalty in Kenya. What follows is a practitioner map of iGaming advertising rules by market, built for the media buyer who has to move budget across jurisdictions without walking an operator into a violation.

This article is a practitioner overview, not legal advice. iGaming advertising rules change frequently and differ by market and platform, so verify the current requirements with the relevant regulator, the ad platform, and a qualified compliance specialist before you run campaigns.

The through line, and the point most affiliates underrate: in the strictest markets, the operator carries the liability for what you publish. Your creative is the operator’s risk. Read the map below as risk management for cross-border traffic, not as trivia.

Important disclaimer: This article is for information only and is not legal advice. Gambling advertising law is jurisdiction-specific, changes quickly, and turns on facts we cannot see from here. Before you run a campaign in any market covered below, confirm the current position with a qualified gambling lawyer or a compliance specialist licensed in that jurisdiction. Several regimes here are new or actively tightening, so verify the current rules before you launch.

Why the map is a media-buying problem, not just a legal one

Start with the fact that reframes everything downstream: the operator holds liability for affiliate creative violations. If your banner overstates a bonus, skips a responsible gambling line, or runs in a window the regulator has closed, the operator you promote is the entity that answers for it. The “the affiliate did it, not us” defense does not hold. Under the UK Gambling Commission (UKGC) and UK law, that affiliate defense fails outright: the license holder is accountable for the marketing done in its name, whoever produced the asset.

For a media buyer, that changes the commercial relationship. Operators in regulated markets are not being precious when they demand pre-approval of every creative, ask for your ad accounts, or audit your landing pages. They are managing a liability they cannot delegate away. Treat compliance as a shared exposure, because legally and commercially it is joint. The affiliates who scale in Tier 1 markets are the ones who make an operator’s compliance team comfortable, not the ones who move fastest around the rules. If you want that relationship to last, build it into how you plan campaigns from the first creative, the same discipline we cover in our guide to running compliant paid ads.

The Tier 1, Tier 2, Tier 3 framework

Before the country detail, use a coarse filter. A common way to map markets for affiliate programs sorts them into three tiers by regulatory intensity:

• Tier 1, high regulation: the United Kingdom, Sweden, Germany, and the Netherlands. Strict rules, licensing, pre-approval, mandatory messaging, and real enforcement teeth. Highest compliance overhead, and usually the highest-value traffic.
• Tier 2, medium regulation: Malta and Gibraltar. Licensed and rules-based, but with more room to operate than Tier 1.
• Tier 3, lighter regulation: markets with a lighter touch, where the constraint is less about ad codes and more about basic licensing and payments.

The tier tells you how much compliance work a market costs before you have written a single line of copy. It does not tell you the value of the traffic, which is a separate question we cover in our breakdown of the top GEOs for iGaming affiliates. High tier and high value often overlap, which is exactly why the compliance discipline pays for itself.

The regulatory map: GEO, regulator, key restriction, tier

The table below compresses the markets a global buyer touches most often. Regulator names and codes are given where the source identifies them; the tier column reflects the framework above, and reads “not classified in source” where the tier framework does not place that market. Restrictions for the newest regimes should be confirmed with the regulator because they are moving.

United Kingdom: strict, and the operator answers for you

The UK is the reference case for a mature, high-liability market. The UK Gambling Commission (UKGC) sits alongside the Advertising Standards Authority (ASA) and its Committee of Advertising Practice (CAP) codes, and together they run a strict regime. Two features matter most to a buyer: responsible gambling messaging is mandatory, and affiliates face pre-approval before their creative can run. That is not a formality. The UKGC’s License Conditions and Codes of Practice (LCCP) put the marketing done by affiliates squarely inside the operator’s compliance obligations.

Practically, that means the operator will want sight of your assets, your channels, and your claims before anything goes live. Build that lead time into your media plan. If you are used to launching creative the same day, the UK will slow you down, and the operators that survive here expect it.

European Union: 27 regimes, not one

The single biggest mistake in EU media buying is treating “the EU” as a market. There is no unified gambling advertising regime. There are 27 separate regimes, and they diverge to the point of contradiction. Three examples make the spread concrete:

• Italy bans gambling advertising. A creative you cannot run at all is the clearest signal that a pan-EU campaign plan is a fantasy.
• Germany permits advertising but the GGL, the joint gambling authority of the German states, enforces strict time limits on when it can appear.
• Malta, under the Malta Gaming Authority (MGA), permits advertising under fair-play rules, which is why it functions as a Tier 2 base for so many operators.

The operational takeaway: geo-target at the country level inside the EU, never at the bloc level, and keep a separate creative and compliance track per country. The vertical you promote shifts the calculus too, since casino, sportsbook, and poker are policed differently across these regimes, a split we unpack in our comparison of how the verticals compare.

United States: fifty answers, one per state

The US mirrors the EU problem at a different scale. Regulation is state-by-state, so there is no national iGaming advertising rulebook. You target per state, and disclosure requirements and licensing both vary from one state to the next. A creative and offer that clears in one state may need different disclosures, or a different license behind it, one border over.

For a buyer this means per-state audience construction and per-state creative variants, not a national push. It also raises the premium on channels that let you geo-fence cleanly and prove where traffic landed, which is part of why channel choice and market choice are inseparable decisions. We go deeper on that in our rundown of the best traffic sources for iGaming affiliates.

Brazil: newly regulated and tightening

Brazil went from open to regulated across 2025 and 2026, and it is still moving. The Secretariat of Prizes and Bets (SPA) sits under the Ministry of Finance, and both are tightening the rules. For a media buyer, the standout requirement is that geo-targeting is critical: you must be able to demonstrate that your traffic is Brazilian and that your offers match a licensed operator’s footprint. Because this regime is new and actively changing, so treat every specific below as a starting point to confirm and confirm the current position before you commit spend. Getting a compliance detail wrong in a market this fresh is how you burn an operator relationship early.

Ontario and Canada: dual-layer compliance

Ontario is the market where two rulebooks stack. The Alcohol and Gaming Commission of Ontario (AGCO) operates a dual-layer compliance model: AGCO’s own standards, plus a Canadian Gaming Association code that takes effect from January 2026. Two layers means two sets of requirements your creative has to satisfy at once, and a gap in either is a violation the operator wears. Because the January 2026 code is new, so confirm the current requirements and check what has actually come into force before you scale, rather than assuming the older AGCO standards are the whole picture.

DACH: Germany, Austria, Switzerland, and a 2026 AML layer

The DACH region, meaning Germany, Austria, and Switzerland, is a strict advertising environment across all three markets, and it is getting a second compliance layer. Alongside the advertising limits themselves, 2026 brings enforcement of an anti-money laundering (AML) directive, which pulls compliance beyond the creative and into how operators and their partners handle funds and verification. Adello’s breakdown of iGaming advertising in DACH is a useful primer on why the region is hard and what the rules demand. Germany already appears in Tier 1 for its ad time limits; the DACH lens adds Austria and Switzerland and the AML dimension on top.

Kenya: pre-approval and a print cap

Kenya is a useful reminder that strict does not only mean Europe. Under the Gambling Control Act 2025, enforced by Kenya’s Gambling Regulatory Authority (GRA), advertising requires pre-approval, print media advertising is capped at two adverts per week, and age verification is mandatory. Those are hard operational constraints: a print cap is a fixed ceiling on frequency, and pre-approval is another lead-time cost in your plan. This regime is recent, so treat the specifics as subject to change and confirm against the regulator at gra.go.ke before you build a Kenyan campaign.

Turning the map into a buying checklist

The map is only useful if it changes what you do before launch. A practitioner’s version, per market:

• Confirm the tier first. Tier 1 markets carry real compliance overhead and pre-approval lead time. Price that into your timelines and your rate expectations before you pitch an operator.
• Never buy at the bloc level. The EU is 27 regimes and the US is a per-state patchwork. Geo-target at the country or state level and run separate creative and compliance tracks. If one market inside the bloc bans advertising, as Italy does, the “one campaign” plan is already broken.
• Treat new regimes as live and unstable. Brazil, Ontario, and Kenya are all recent or tightening. Verify the current rule with a licensed specialist before spend, not after a takedown.
• Respect the mandatory elements. Responsible gambling messaging in the UK, age verification in Kenya, and time windows in Germany are not creative preferences. They are the price of running at all.
• Assume the operator sees your liability as theirs. Because it is. Give compliance teams the pre-approval, the channel visibility, and the documentation they need to keep your paid campaigns compliant, and you become the affiliate they scale rather than the one they cut.

None of this is about finding clever ways around the rules. In markets where the affiliate defense fails, evasion is not a strategy, it is a transfer of risk onto the operator that eventually costs you the account. The durable edge in cross-border iGaming media buying is boring and repeatable: know the regulator, respect the restriction, verify the fresh regimes, and document everything.

A final reminder: the above is a general map, not legal advice, and gambling rules change faster than any single article can track. Before you spend in any market, get the current position confirmed by a qualified gambling lawyer or compliance specialist licensed there.

Frequently asked questions

Who is liable if an iGaming affiliate breaks an advertising rule?

In strict markets the operator holds the liability for affiliate creative violations. Under the UK Gambling Commission (UKGC) and UK law, the affiliate defense fails: the license holder answers for marketing done in its name, whoever built the asset. That is why operators in regulated markets insist on pre-approval and channel visibility, and why you should treat compliance as a shared exposure.

Can I run one iGaming ad campaign across the whole European Union?

No. There is no single EU regime. There are 27 separate national regimes, and they contradict each other: Italy bans gambling advertising entirely, Germany enforces strict time limits, and Malta permits advertising under fair-play rules. Geo-target at the country level and run a separate creative and compliance track per country.

Which iGaming markets are the strictest for advertising?

The high-regulation Tier 1 group in the source framework is the United Kingdom, Sweden, Germany, and the Netherlands, with mandatory messaging, licensing, and pre-approval. Malta and Gibraltar sit in medium-regulation Tier 2. Beyond the tiers, Kenya’s Gambling Control Act 2025 and the DACH region are also strict, and several regimes are tightening. Always verify current rules before you spend.

Why do Brazil, Ontario, and Kenya need extra verification?

All three are new or actively changing. Brazil was regulated across 2025 and 2026 with the Secretariat of Prizes and Bets tightening rules, Ontario adds a Canadian Gaming Association code on top of AGCO standards from January 2026, and Kenya’s framework under the Gambling Control Act 2025 is recent. Rules in flux mean today’s detail can be outdated by launch, so confirm each with a licensed specialist. We flag these as points to confirm with a qualified specialist throughout.