What ongoing compliance requirements must a licensed Ontario online casino meet to stay registered?

Getting registered is just the starting line — staying registered means meeting a continuous set of obligations that the AGCO and iGaming Ontario monitor actively. Here's what that looks like in practice.

Two authorities, one ongoing obligation

Being a fully registered and authorized operator in Ontario's igaming market means the organization has successfully received a registration from the AGCO and executed an operating agreement with iGaming Ontario — and to do that, they will have met rigorous standards of game integrity, fairness, player protections, and social responsibility. Neither of those relationships ends at launch. The AGCO monitors operators, suppliers, and digital game offerings for compliance with the Registrar's Standards for Internet Gaming on an ongoing basis, and where concerns are identified, it brings operators back into compliance through progressive sanctions — warnings, suspensions, monetary penalties, and in the most serious cases, revocations.

iGaming Ontario, for its part, oversees contract obligations for the provision of services in Ontario's regulated igaming scheme — meaning operators face scrutiny from both sides simultaneously.

The Control Activity Matrix and competency demonstrations

All operators are required to submit an independently audited document setting out the processes and controls they have in place to meet all outcomes and requirements in the Registrar's Standards — commonly referred to as a Control Activity Matrix (CAM) — and to meet the independent audit requirement, operators may use their internal audit function or external auditors. This isn't a one-time filing. Within six months of commencing operations, all operators must provide a live demonstration of the controls they have established, with the specific compliance priority areas defined for each operator in advance. The information gathered through the CAM and the competency demonstration feeds directly into ongoing compliance monitoring, with proactive engagement and transparent dialogue between the AGCO and registrants at the core of the program.

What the standards actually cover day-to-day

The Registrar's Standards touch every layer of the operation. Key themes include responsible gambling embedded in operator culture, game integrity, preventing money laundering, restricting access by minors, and protecting players' personal information.

On the responsible-gambling side, operators must give players functional tools at all times. Players must be provided with an easy and obvious way to set gaming limits — financial or time-based — upon registration and at any time afterward, including the option to set loss and deposit limits at sign-up. When a player wants to loosen a limit they've already set, the operator cannot simply flip a switch: where a gaming limit has been previously established, a request to relax or eliminate that limit can only be implemented after a cooling-off period — and that cooling-off period is 24 hours.

All Ontario igaming operators are required to participate in BetGuard, the centralized self-exclusion tool that allows people to opt out of all regulated online gambling in Ontario — and operators must also maintain their own self-exclusion program that meets the requirements set out in the Registrar's Standards. Players can verify a site is genuinely regulated by checking for both the iGaming Ontario and BetGuard logos, which every fully registered site is required to display.

On the supply-chain side, operators and gaming-related suppliers cannot enter into agreements or arrangements with any unregistered person providing goods or services if providing those goods and services in iGaming Ontario's regulated scheme would require registration under the Gaming Control Act. That means the compliance chain runs through every third-party platform, game studio, and technology provider an operator uses.

As part of regular review of responsible gambling policies and procedures, operators must consult with stakeholders — including players and responsible gambling practitioners — to assess and improve harm reduction, and staff understanding of those policies and their impact on player protection must also be assessed. Any gaps identified must be addressed.

Regulatory data and incident reporting

The AGCO uses a Secure File Transfer Protocol data exchange for all ongoing regulatory data — including data indicators, required documents, and reports — and registrants must ensure they fully understand the AGCO's requirements related to incident notifications and regulatory submissions as outlined in the AGCO Notification Matrix. A key element of the outcomes-based approach is that registrants have the ability to evaluate and manage the risks particular to their business — but if deficiencies in the control environment are noted, the AGCO will work with or respond to a registrant to achieve compliance.

For Ottawa players, the practical takeaway is straightforward: the sites that appear on the official iGaming Ontario registry have agreed to all of the above and continue to be held to it. You can check the live list of registered operators at igamingontario.ca. Ontario's legal gambling age is 19+, and if you ever want to talk through your play with someone, ConnexOntario is available at 1-866-531-2600.