How to run compliant programmatic campaigns in regulated iGaming markets

Compliance is not a checklist signed at the end of a campaign. It is a set of controls that run before every bid: the market's age floor, where the ad may appear, what the creative may say, and a record that shows it happened. Campaigns built that way are easier to defend in a licence review and, as the last section shows, cheaper to run.

Start with the licensed markets

Before any audience or inventory planning, document the markets the brand is licensed in, the licence held in each, the age threshold for advertising audiences and the local restrictions on channels, times and messages. This list is the foundation for everything that follows; a campaign that is not anchored to it will drift.

Map the rules market by market

Every regulated market sets its own advertising rules. In the Netherlands, online licensees may not run untargeted advertising, and targeted online ads must reach an audience of which at least 95% is aged 24 or over ^[1]. In Canada each province regulates on its own; Ontario is the open, licensed iGaming market, and its regulator treats anyone under 19 as a minor for casino gaming and sports betting ^[2]. Finland is moving to a licensing model: the National Police Board accepts licence applications from 1 March 2026, and licensed operators may start on 1 July 2027 ^[3]. In the United States, online casino and sports betting are regulated state by state. The industry's own code says sports betting ads should run only where at least 73.6% of the audience is reasonably expected to be 21 or older, with a responsible gaming message and a helpline number ^[4].

Keep these rules in one reference per market, so media planners and compliance reviewers work from the same source. Our market briefs under Insights → Regulations are built for that purpose and are re-checked weekly.

Control every decision layer

Apply geography, age, self-exclusion, contextual and creative rules before the bid, then monitor placement quality during delivery. A rule that is applied after an impression has been served is a report, not a control.

Age protection beyond demographic targeting

Demographic age targeting relies on declared or modelled ages, and declared ages are often wrong. In research for Ofcom, a third of UK children aged 8 to 17 with a social media profile had a user age of 18 or over ^[5].

Content-level inspection adds a second layer. It classifies the video or page itself, removes placements that attract young audiences, and learns from weekly monitoring. This matters most for video and CTV, where family viewing is common, and in markets with strict age floors such as the Netherlands' 24+ ^[1].

Creative and messaging controls

Creatives should be reviewed against each market's rules on bonus claims, inducements, the use of celebrities or athletes, and required safer-gambling messages. Build message variants per market before launch instead of editing them during a campaign. Keep an approval record that links each creative version to the markets and dates it ran.

Placement and inventory quality

Programmatic buying reaches thousands of sites, apps and screens, so inventory controls must run before the bid. Use allow lists for premium publishers, exclude sites and apps aimed at children, block content categories that conflict with market rules, and check out-of-home screens near schools and youth venues. During delivery, review placement reports weekly and remove anything that underperforms or falls outside policy.

Keep the evidence

Placement-level reporting and a clear audit trail let acquisition and compliance teams review the same facts. For each campaign, keep the market rules used, the targeting and exclusion settings, the creative approvals and the placement reports. If a regulator asks, the answer should be a file, not a reconstruction.

Connect compliance to performance

Compliance and growth share the same goal: reaching real, eligible adult players. Excluding ineligible audiences cuts wasted spend, improves the rate at which signups turn into first-time deposits, and lowers the cost per FTD. Report compliance metrics next to acquisition metrics, such as the share of excluded impressions, audience-match accuracy, signups, FTDs and cost per FTD. That way both teams can see how controls protect budget as well as licences.

What this means for your plan

• One reference per market: licence, age floor, channel rules, required messages.
• Controls before the bid: geo, age, self-exclusion, inventory allow lists, creative variants per market.
• Weekly placement review and a written trail for every change.
• Compliance metrics reported next to FTD metrics, so the controls are judged on what they save.