With new markets opening and regulatory frameworks evolving rapidly, the online gambling industry is entering a period of intense transformation. From data protection and responsible gambling to cross-border licensing and emerging technologies like blockchain, operators today face a growing web of compliance challenges.At CasinoRank we had the opportunity to speak with Mike de Graaff, Chief Compliance Officer at BetComply, to get his perspective on how iGaming companies can better prepare for these shifting demands.
Drawing from his experience helping operators navigate complex regulatory environments, Mike shared valuable insights on what it takes to build scalable, future-proof compliance strategies in an increasingly fragmented global market.
In this interview, Mike discusses:
- Cross-border licensing: Why each jurisdiction requires a tailored approach.
- Data protection: The importance of a unified, compliance-by-design infrastructure.
- Player monitoring: Adapting to stricter AML and reporting requirements.
- Blockchain: Its potential to improve transparency and security, despite regulatory hurdles.
- Responsible gambling: Integrating protections into the player experience from the start.
With the rapid rise of new jurisdictions legalizing online gambling, what are some of the main challenges operators face when applying for licenses across different countries, and how can these challenges be effectively managed?
Mike de Graaff: One of the main challenges is the common misconception that having a license in one jurisdiction automatically makes licensing in another straightforward. Each country has its own unique regulatory framework, and assuming a copy-paste approach often leads to delays or non-compliance.
Take Brazil, for example; its recent market opening triggered a gold rush, resulting in a chaotic launch for many operators. To manage these challenges, companies must invest in jurisdiction-specific expertise and adopt a tailored licensing strategy for each market rather than relying on previous experience alone.
Some countries have started to expand their data protection requirements, such as GDPR. How do these regulations impact gambling platforms, and what measures should operators take to ensure compliance with these standards?
Mike de Graaff: For multi-jurisdictional platforms, frameworks like GDPR and ISMS-related regulations should be implemented top-down as part of the platform’s core design.
Adopting a piecemeal or “band-aid” approach, where new compliance requirements are simply patched in, can lead to a fragmented architecture that’s difficult to maintain and prone to error. A unified, compliance-by-design infrastructure is more scalable and helps avoid costly technical debt as regulations evolve.
In some new markets, regulators have begun requiring detailed data on player activities to prevent fraud and support anti-money laundering efforts. How do you think player monitoring and control practices should evolve in line with these new requirements?
Mike de Graaff: There’s a clear distinction between what should happen and what will happen.
On regulation: Ideally, regulation should encourage innovation rather than stifle it. Blanket-type measures, like hard limits or generic reality checks, miss their goals often. What’s needed is a regulatory framework that allows operators to use data-driven tools to personalize and enhance player protection.
On reporting: We’re seeing more jurisdictions roll out some form of vault-based or real-time reporting. However, the lack of harmonization across markets leads to fragmentation.
Operators are forced to build and maintain multiple, complex integrations, each with its own format, frequency, and data model. What’s needed is greater standardization in how data is reported across jurisdictions to ease the burden on operators and increase regulatory efficiency.
How are iGaming companies adopting blockchain technology to enhance transparency and security in transactions, and do you believe this could influence their ability to obtain licenses to operate across different jurisdictions?
Mike de Graaff: Blockchain is a promising innovation with real potential for improving transparency and integrity in gambling systems. However, its adoption is currently being held back by regulatory frameworks that have yet to fully recognize or accommodate the technology.
Until regulators formally acknowledge blockchain-based solutions, their use in licensing processes will remain limited. That said, as trust and familiarity with the technology grows, it could eventually become a valuable asset for operators seeking to demonstrate compliance, particularly around fairness and auditability.
Responsible gambling has become a major area of focus, with regulations demanding stricter protections for consumers. How can companies effectively balance these regulatory requirements with providing an enjoyable player experience, especially for new users entering the market?
Mike de Graaff: The key is better collaboration between compliance and commercial teams. Currently, many companies follow a linear process: the commercial team develops a concept, then sends it to compliance for trimming; or compliance informs commercial teams of new obligations after the fact.
This reactive approach creates friction. Instead, responsible gambling should be embedded early in the product design process. By fostering ongoing dialogue between departments, companies can build player protection into the user experience without sacrificing engagement, making compliance an enabler of innovation, not a blocker.
BetComply has extensive experience in managing compliance and licensing requirements. How has the evolving international regulatory landscape influenced BetComply’s role in providing solutions to online gambling operators, and what are some of the company’s biggest achievements in this space?
Mike de Graaff: As the global regulatory landscape continues to evolve rapidly, BetComply has become the go-to firm for operators entering new markets. What sets us apart is our unique combination of regulatory, technical, and legal expertise, all under one roof. This allows us to provide end-to-end solutions that are both practical and strategic.
While we can’t publicly disclose the majority of our client work due to confidentiality, some projects, such as our involvement with Hard Rock, are publicly known. Our track record speaks for itself: in just 18 months, we grew from a team of 3 to 20, entirely through revenue-driven growth without external investment. That kind of momentum is only possible when you consistently deliver high-quality work.
For BetComply, how important is it to build strong relationships with regulatory authorities worldwide, and how does this contribute to helping operators secure the necessary licenses to operate?
Mike de Graaff: Maintaining strong, professional relationships with regulatory authorities is important to us—but let’s be clear: we are not lobbyists, nor do we claim to have shortcuts or special treatment.
What we do offer is a reputation for quality. Regulators recognize our work as thorough, accurate, and helpful to the licensing process. At the end of the day, the success of any license application depends on its quality and that’s where we make the difference.
BetComply is known for using advanced tools to manage risk and ensure compliance. What are some of the latest technologies your company uses to ensure that gambling operators stay compliant with local and international regulations?
Mike de Graaff: One key example is our regulatory monitoring service, which uses proprietary technology to track updates and developments across multiple jurisdictions. This ensures that our clients are always one step ahead—whether it’s changes to technical standards, licensing conditions, or player protection requirements.
By combining automation with expert oversight, we give operators both speed and confidence in navigating complex regulatory environments.
Mike, as the Chief Compliance Officer of BetComply, how do you think recent regulatory changes in the global iGaming market have impacted your strategies and services for operators? Could you share some examples of successful outcomes you’ve had in this regard?
Mike de Graaff: Some jurisdictions, like the Netherlands, have a higher emphasis on the involvement of addiction care experts or experts from experience. Partially due to this involvement, we have experts in the field of neurodivergency, autism and mental health working with us at Betcomply to support operators even better.
What can we expect from BetComply in the future regarding innovation in compliance and licensing for iGaming? Are there any new developments that will help operators better manage regulations in emerging markets and ensure secure, sustainable operations?
Mike de Graaff: We’re continuing to invest heavily in innovation. One of our most exciting developments is ComplyCheck, a hybrid system combining self-assessment and audit functionality. It’s been very well received in the Netherlands and UK, where it’s helped operators proactively manage their compliance posture.
We’re now expanding ComplyCheck into new jurisdictions and regulatory areas, with a focus on scalability and adaptability. The goal is to provide operators with tools that are not just reactive but enable sustainable, long-term compliance across diverse markets.
