Platform Guide · 2026
What is an iGaming platform? PAM, modules and how to choose one in 2026
An iGaming platform is the software that runs an online casino or sportsbook as a business. It knows who each player is, holds their balance, applies bonuses and limits, moves deposits and withdrawals and reports to the regulator; games and odds plug into it. In 2026 more of the rulebook lives inside the platform than ever. The draft of GLI-19 version 4.0, issued by Gaming Laboratories International on 7 July 2026, adds a dedicated player account chapter with multi-factor authentication at account creation.
The short version
- The platform is the system of record: accounts, wallet, bonuses, payments, compliance and reporting.
- Its core is the PAM (player account management); every other system reads from it or writes to it.
- Games and odds are separate layers: an aggregator supplies content, a sportsbook engine supplies odds.
- Deposit limits, bonus rules and identity checks are now platform features, set per market.
- Choose on live demos of every module, per-market configuration and the right to take your data with you.
The platform, the aggregator and the studio are different things
Three kinds of supplier get called “the platform”, and mixing them up is the most common mistake in early conversations.
| Layer | What it does | What it holds |
|---|---|---|
| iGaming platform | Runs accounts, wallet, bonuses, payments, compliance and reporting | The player and the money |
| Game aggregator | Connects many game studios through one integration | The content catalogue |
| Game studio | Builds and hosts the games | The game logic and results |
| Sportsbook engine | Sets odds and accepts bets | Odds, risk and settlement |
An operator needs a platform before games matter at all. Content then arrives through a casino game aggregator or a casino API, and sport through a sportsbook that should share the same wallet.
PAM: the system of record
Player account management, or PAM, is the core of the platform. Track360’s 2026 buyer guide calls it “the system of record for the player in an iGaming stack” and lists five core functions:
- Identity and KYC orchestration: registration, verification status and document checks.
- Wallet and transaction ledger: balances, deposits, withdrawals and every bet and win.
- Bonus and promotion engine: offers, wagering rules and bonus balances.
- Responsible gambling controls: limits, time-outs, self-exclusion.
- Reporting and data access: the numbers finance, compliance and regulators rely on.
A unified wallet is what makes the PAM valuable: one balance across casino, live casino and sportsbook, so a player never moves money between products. Our seamless vs transfer wallet guide explains the trade-offs.
The modules around the PAM
Around the core sit the modules your team uses every day. Each one can come from the platform supplier or plug in through an API:
- Cashier and payments: deposit and withdrawal methods per market, routing and retries. See our iGaming payments guide.
- Bonus engine: welcome offers, free spins, cashback and wagering rules. See the bonus engine guide.
- KYC, AML and fraud: identity checks, screening and triggers on unusual activity.
- CRM and affiliates: campaigns, messaging and partner tracking.
- Lobby and CMS: game order, banners and pages, edited without a developer.
- Reporting and back office: GGR, bonus results and player history in one set of numbers.
Rules that now live inside the platform
Regulators increasingly write their rules into the product, which means the platform has to enforce them per market:
- Great Britain: since 31 October 2025, operators must prompt customers to set a financial limit before their first deposit. From 19 January 2026, wagering requirements are capped at 10 times and bonuses mixing betting, casino, bingo or lotteries are banned. On 7 July 2026 the Gambling Commission confirmed a staged rollout of financial risk assessments.
- Ireland: the commencement order that let the new regulator begin licensing took effect on 5 February 2026. The Gambling Regulation Act 2024 bans credit cards for gambling and requires customer-set spending limits.
- Netherlands: monthly deposit limits, lower for players aged 18 to 24, have applied since 1 October 2024.
- Germany: a deposit limit applies across all licensed operators through the central LUGAS system.
None of these should need a release. On a good platform they are settings, scoped to a jurisdiction. Our responsible gambling tools guide goes into each control.
Security and certification
GLI-19 is GLI’s standard for interactive gaming systems. Version 3.0 dates from July 2020. The version 4.0 draft of 7 July 2026 adds a player account chapter with multi-factor authentication at account creation, geolocation with spoofing and proxy detection, and moves technical security controls to the GLI Gaming Security Framework.
ISO/IEC 27001 matters in practice: the UK Gambling Commission requires remote licensees to commission an independent security audit against ISO/IEC 27001:2022 and its remote technical standards, the first within six months of licensing and then every year. Ask any platform supplier which audits and certificates it holds today. Our casino API security guide covers the integration side.
Delivery models: white label, turnkey, licensed PAM or build
| Licence | Control | Speed | |
|---|---|---|---|
| White label | Supplier’s | Lowest | Fastest |
| Turnkey | Yours | High, inside the product | Medium |
| Licensed or standalone PAM | Yours | High, you assemble the stack | Slower |
| Own build | Yours | Full | Slowest |
The choice is about who holds the licence and how much of the operation you want to own, not about maturity. Established groups take a white label for a test market; first-time operators with a licence go turnkey. The full comparison is in white label vs turnkey vs self-service.
How to choose an iGaming platform: eight questions
- Can you show every module working on a live account, not a slide?
- Are deposit limits, bonus rules and identity checks configurable per jurisdiction without a release?
- Do casino and sportsbook share one wallet and one player account?
- Which certificates and audits do you hold today: GLI-19, ISO/IEC 27001?
- How does the cashier route and retry payments in my markets?
- Do reports reconcile to one set of numbers across providers and payment methods?
- What can I export, and in what format, if I leave?
- How do you add a new market: configuration or a project?
Our casino platform page sets out how we answer each of them.
Sources: Track360 (18 July 2026); UK Gambling Commission (4 February 2025); UK Gambling Commission (26 March 2025); UK Gambling Commission (July 2026); gov.ie (February 2026); GLI-19 v4.0 executive summary (7 July 2026); UK Gambling Commission, security audit advice (March 2026).
Frequently asked questions
A platform your team can run
IGP’s casino platform brings accounts, one wallet, bonuses, payments, reporting and a back office, with 150+ providers and 18,000+ games already connected.
See the casino platform →