How does the AGCO monitor registered Ontario online casinos for ongoing fairness and compliance after they launch?

Registration is just the starting line — the real work of oversight happens continuously after an operator goes live. Here's how the AGCO actually does it.

A Risk-Based, Outcomes-Focused Framework

The AGCO's compliance approach is risk-based and outcome-focused. That means it doesn't try to prescribe every operational detail; instead, risk-based refers to the regulatory risks underlying the Standards and requirements, and focuses the greatest resources on mitigating the highest-risk areas. Outcome-focused means emphasizing the results that regulated sectors are meant to achieve, rather than prescriptive activities that must be carried out.

The foundation of this system is the Registrar's Standards for Internet Gaming. The Standards provide outcomes that internet gaming operators and gaming-related suppliers must meet to address key areas of regulatory risk — including the prevention of underage access, game integrity, privacy and information security, anti-money laundering, and responsible gambling. Periodic risk assessments are conducted to ensure that the standards continue to be relevant.

What Ongoing Monitoring Actually Looks Like

Compliance activities include ongoing regulatory assurance activities including inspecting, monitoring, and conducting regular audits of casinos and internet gaming. For online operators specifically, the AGCO monitors igaming operators, suppliers, and digital game offerings for compliance with regulatory obligations, including the Registrar's Standards for Internet Gaming.

One concrete mechanism: within six months of commencing operations in the regulated Ontario market, all operators are required to provide a demonstration of the controls they have established to address the outcomes and requirements in the Registrar's Standards. This competency demonstration emphasizes key compliance priority areas defined for each operator in advance. The information gathered through this process feeds into ongoing compliance monitoring and management activities.

The AGCO also uses proactive third-party assessments — not just reactive enforcement. A real-world example: as part of its ongoing compliance monitoring, the AGCO identified a geolocation issue during a proactive, third-party assessment it undertook of registered internet gaming operators. Tests were conducted from physical locations in Quebec and New York state to determine whether Ontario gaming sites were accessible outside of Ontario — and one operator failed to accurately identify the location of one of the devices. That led to a monetary penalty.

On the technical side, for internet gaming, the AGCO has modernized the approach whereby it oversees the certification of internet gaming technology against the Registrar's Standards by registered independent test labs (ITLs), rather than testing in-house. Every game offered on a regulated Ontario site must be certified through this process — the Standards include clear requirements for operators and gaming-related suppliers to only provide games that have been certified by an AGCO-registered ITL against the Standards.

The AGCO's Investigations and Enforcement Bureau adds another layer. In fiscal year 2024–2025, the IEB conducted 1,107 investigations following a notable increase in operator reports of suspicious or criminal activity on regulated online gaming sites, and continued to work closely with the AGCO and iGO to monitor emerging threats and support newly licensed operators. For financial crime specifically, the IEB reinforced its anti-money laundering efforts through data analytics, targeted enforcement and intelligence sharing, using its Suspicious Transaction Report analytical dashboard to prioritize high-risk individuals.

Operators Must Self-Report — and Face Real Consequences

Compliance isn't purely external. The Standards reference a Notification Matrix — a document that outlines the minimum notification obligations for registrants to the Registrar, including the timeframe and mode of contact for each type of notification. Required notifications include instances of non-compliance or a substantial change to the control environment. Operators are also required to maintain independent internal oversight: the independent oversight function should be responsible for auditing the organization's compliance management framework, identifying and managing risks, and exercising oversight that is independent from operational management.

When problems surface, the AGCO may use a full spectrum of compliance responses, including education, warnings, financial penalties, suspensions, and, in the most serious cases, revocations. The AGCO will generally deploy a progressive approach to sanctions, but in cases where severe incidents occur, will act proportionately to ensure the public is protected.

The Player-Facing Signal

For players, the most direct indicator that a site is under this regulatory umbrella is the display of both the iGaming Ontario and BetGuard logos. Per iGaming Ontario, seeing these logos confirms the site is managed by iGaming Ontario and regulated by the AGCO. BetGuard — launched in May 2026 — also serves as Ontario's centralized self-exclusion registry, allowing anyone 19+ to opt out of all registered operators in a single step.

If you ever have concerns about a specific operator's conduct, the AGCO accepts complaints directly at agco.ca. For support with gambling-related harm, ConnexOntario is available around the clock at 1-866-531-2600.