What ongoing compliance obligations does a registered Ontario online casino have to meet to keep its licence?

Getting — and keeping — a registration to operate an online casino in Ontario is a genuinely demanding, continuous exercise. The dual-oversight structure is the first thing to understand: the AGCO is the regulator for the province while iGaming Ontario is the commercial conduct-and-manage entity. Both have ongoing authority over registered operators, and obligations flow from both simultaneously.

The Registrar's Standards — the backbone of day-to-day compliance

The AGCO's Registrar's Standards for Internet Gaming are meant to ensure that player protections, game integrity, responsible gambling safeguards and anti-money laundering protections are in place. These aren't a checklist you satisfy once at launch and then set aside. All operators are required to submit an independently audited document — commonly called a Control Activity Matrix (CAM) — setting out the processes and controls they have in place to meet all the outcomes and requirements in the Standards. That document feeds into a continuing cycle: the information gathered through the CAM and the competency demonstration feeds into ongoing compliance monitoring and management activities, with proactive engagement and transparent dialogue between the AGCO and registrants at the core of the program.

Operators also bear responsibility for everything that happens on their platform, regardless of which supplier is actually delivering it. Operators are expected to ensure that the Standards related to the operation of their player platform are met, regardless of the entity that is carrying out the related activities. That means the compliance obligation travels upstream into the supply chain: operators and gaming-related suppliers shall not enter into any agreements or arrangements with any unregistered person who is providing goods or services if, to provide those goods and services in iGaming Ontario's regulated online lottery scheme, it would require registration under the Gaming Control Act.

Operators must also ensure that their games and supporting critical gaming systems are certified by a registered independent testing laboratory (ITL). Technology compliance is not a one-time gate — any new game or system change that touches the gaming platform needs to meet the same standards on an ongoing basis.

Responsible gambling obligations are among the most substantive and specific. Operators regulated in Ontario are required to successfully achieve and maintain responsible gambling accreditation through the Responsible Gambling Council's RG Check program, run problem gambling prevention and responsible gambling campaigns, and participate in iGaming Ontario's BetGuard tool for opting out of all regulated online gambling in Ontario. The accreditation requirement is not permanent from day one: iGaming Ontario requires operators to obtain the RG Check accreditation within the first two years of the date of the Operating Agreement and maintain such accreditation for the remainder of their Operating Agreement term. Operators must also run their own self-exclusion program meeting the AGCO's Standards alongside the province-wide BetGuard system. All igaming operators in Ontario participate in BetGuard, and operators are also required to have their own self-exclusion program that meets the requirements set out in the Registrar's Standards for Internet Gaming.

Anti-money laundering is a parallel and equally serious track. iGaming Ontario and the Financial Transactions and Reports Analysis Centre of Canada (FINTRAC) maintain the right to conduct audits and inspections of operators to ensure compliance with iGaming Ontario's requirements and the Proceeds of Crime (Money Laundering) and Terrorist Financing Act. This is federal law layered on top of provincial regulation — operators must maintain functioning AML programs, not just policies on paper.

Data, audit rights, and marketing round out the picture. iGaming Ontario retains the right to audit and inspect operators' books of accounts and other records, materials, information, and data as they relate to the operation of the iGO site during the term of the agreements and for a period of seven years thereafter. On the marketing side, operators must comply with iGaming Ontario's policies and directions regarding marketing and advertising.

Registration renewal is the administrative thread that holds it all together. The AGCO will remind operators by email or mail 60 days before registration expires, and operators must apply to renew and submit the right fee before that expiry date. Miss it, and expired registrations cannot be renewed — if the AGCO doesn't receive the renewal application by the expiry date, the registration will expire, it won't be valid anymore, and the operator will have to apply for a new registration and cannot operate an igaming site in the meantime.

When something goes wrong, the AGCO's enforcement posture is calibrated but firm. Where regulatory expectations are not met, the AGCO may use a full spectrum of compliance responses including education, warnings, financial penalties, suspensions, and, in the most serious cases, revocations — generally deploying a progressive approach to sanctions.

The full, current detail of every standard, threshold, and reporting obligation lives in the AGCO's Registrar's Standards for Internet Gaming and the iGaming Ontario operator policies — those are the authoritative sources operators must work from directly, since specific parameters can and do change. For players, the practical takeaway is that a site carrying the iGaming Ontario logo is subject to all of this, continuously. If you ever need support around your own gambling, ConnexOntario is available around the clock at 1-866-531-2600.