Trust, Compliance & Governance

    US State-by-State Compliance: A Technology Checklist

    Navigate US sports betting state regulations with this comprehensive technical checklist.

    15 min read3,538 words
    Share
    TL;DR

    The US sports betting market is fragmentary. As of 2026, 30+ states have legalized sports betting, with new states legalizing every year.

    The US Betting Regulation Maze

    The US sports betting market is fragmentary. As of 2026, 30+ states have legalized sports betting, with new states legalizing every year.

    But here's the problem: Each state has different rules.

    What's compliant in Colorado might violate New Jersey law. Advertising that works in Michigan might be illegal in New York. Age verification methods acceptable in one state might be rejected in another.

    For publishers, operators, and affiliates trying to scale across the US, this is incredibly complex. You can't use one "US rulebook." You need 30 different rule books.

    This guide gives you a state-by-state checklist for the major betting states. Use it to ensure your technology and content are compliant in each market.


    Part 1: The US Betting Landscape (2026)

    States with Legal Sports Betting (By Tier)

    Tier 1: Mature Markets (5+ years, established rules)

    • Nevada
    • New Jersey
    • Delaware
    • Pennsylvania
    • West Virginia
    • New York
    • Maryland

    Tier 2: Established Markets (2-5 years, rules clear)

    • Colorado
    • Indiana
    • Illinois
    • Michigan
    • Tennessee
    • Virginia
    • Iowa
    • Louisiana

    Tier 3: Growing Markets (Recent legalization, evolving rules)

    • Ohio
    • Arizona
    • Connecticut
    • Wyoming
    • Washington DC
    • Kansas
    • Texas (approaching legalization)

    Tier 4: Other States with Limited Offerings

    • Oregon, Montana, New Mexico, North Carolina, South Dakota, Mississippi, and others (limited to tribal or in-person betting)

    Total Market Size & Growth

    • 2020: 18 states
    • 2023: 25 states
    • 2026: 30+ states
    • Projected 2027-2028: 40+ states

    Implication: Rules are evolving constantly. You need a system that can adapt quickly as new states legalize.


    Part 2: Universal Technical Requirements (All States)

    Before state-specific requirements, here are universal requirements that apply to virtually all betting states:

    Universal Requirement 1: Age Verification

    Requirement: Users must be 18+ to access betting content.

    Technology stack:

    • IP geolocation (Layer 1)
    • Third-party age verification (Layer 2)
    • ID verification / KYC (Layer 3, for risky content)

    Compliance standard: Must verify age before allowing access to betting content, betting affiliate links, or operator promotions.

    False positive rate acceptable: <5% (blocking users who should access)

    Documentation needed:

    • How you verify age
    • Audit trail of verification decisions
    • False positive/negative rates
    • Update frequency

    Universal Requirement 2: Geo-Fencing (State-Level)

    Requirement: Content must be geo-fenced to the state level. You cannot offer betting services in states where they're prohibited.

    Technology stack:

    • IP geolocation provider (MaxMind, GeoIP2)
    • VPN detection
    • GPS verification (for verification layer)

    Compliance standard: 95%+ accuracy at state level in developed parts of US.

    For publishers: Affiliate links to betting operators must not be displayed to users outside states where those operators are licensed.

    For operators: Cannot accept bets from users outside licensed states.

    Documentation needed:

    • Geolocation accuracy testing
    • Audit trail of geo-fence decisions
    • How you handle VPN users

    Universal Requirement 3: Responsible Gambling Integration

    Requirement: All states require operators to provide responsible gambling information.

    Minimum elements:

    • Link to national problem gambling helpline (1-800-GAMBLER or NCPG.org)
    • Information on problem gambling signs
    • Self-exclusion information
    • Deposit/time limit tools (usually operator-managed, not publisher)

    For publishers: Include responsible gambling information alongside betting content.

    Documentation needed:

    • Where responsible gambling info appears
    • Links to approved resources
    • Frequency of updates

    Universal Requirement 4: Claims & Advertising Standards

    Requirement: States restrict misleading claims about betting.

    Prohibited claims (in most/all states):

    • "Guaranteed wins"
    • "Easy money"
    • "Risk-free" betting
    • Exaggerated odds/winnings
    • Claims of expertise without disclosure

    Required transparency:

    • Affiliate relationships must be disclosed
    • Risk messages recommended
    • Odds must be clearly stated

    For publishers: Any betting tips, predictions, or analysis must include disclaimers about risk and past performance.


    Part 3: State-by-State Technology Checklist

    Use this checklist to verify your compliance in each major state.

    New York (Large Market, Strict)

    RequirementYour StatusDetails
    Age verification[ ] ImplementedMust use ID verification for high-confidence (not just IP estimation)
    Geo-fencing[ ] ImplementedMust block users outside NY
    Licensing model[ ] ConfiguredNY allows multiple operators (4+ licensed as of 2026)
    Advertising restrictions[ ] ImplementedStricter than most states; no outdoor ads
    Affiliate requirements[ ] ReviewedSome operators don't allow publisher affiliates; check operator agreements
    Responsible gambling[ ] IntegratedNY requires funding for treatment; operators manage this
    Sports integrity[ ] VerifiedOperators must be members of official league integrity programs
    Player data[ ] ProtectedNY law requires strong data protection (state-level GDPR-lite)
    Compliance documentation[ ] ReadyHave audit trail of all compliance measures

    NY-Specific Notes:

    • License fee: $5M+ (very expensive)
    • Licensing timeline: 18-24 months
    • Only operators with retail presence allowed
    • Publisher affiliates: Mostly not allowed (restrictive)

    Colorado (Accessible Market, Moderate)

    RequirementYour StatusDetails
    Age verification[ ] ImplementedIP geolocation + third-party verification acceptable
    Geo-fencing[ ] ImplementedMust block users outside CO
    Licensing model[ ] ConfiguredMultiple operators allowed (15+ licensed)
    Advertising restrictions[ ] ImplementedLess restrictive than NY; fewer outdoor ad bans
    Affiliate requirements[ ] ReviewedMost CO operators allow publisher affiliates
    Responsible gambling[ ] IntegratedRequired; most operators have their own programs
    Sports integrity[ ] VerifiedOperators must report suspicious activity; no special requirement for publishers
    Compliance documentation[ ] ReadyHave audit trail ready for state gaming commission

    CO-Specific Notes:

    • License fee: $50K-$500K
    • Licensing timeline: 3-6 months (fast)
    • Multiple operators, lower barrier to entry
    • Good for publishers expanding into US

    New Jersey (Established, Affiliate-Restrictive)

    RequirementYour StatusDetails
    Age verification[ ] ImplementedIP geolocation + third-party verification acceptable
    Geo-fencing[ ] ImplementedMust block users outside NJ
    Licensing model[ ] ConfiguredMultiple operators allowed (15+ licensed)
    Affiliate restrictions[ ] CRITICALNJ restricts affiliate advertising; may block affiliate content entirely
    Advertising claims[ ] ImplementedStandard claims restrictions; no unique NJ requirements
    Responsible gambling[ ] IntegratedRequired; operators must provide self-exclusion
    Sports integrity[ ] VerifiedOperators required to report suspicious betting
    Compliance documentation[ ] ReadyNJ Division of Gaming Enforcement has detailed audit requirements

    NJ-Specific Notes:

    • License fee: $100K-$500K
    • Licensing timeline: 6-12 months (moderate)
    • Affiliate challenge: NJ restricts third-party affiliate advertising. Publisher affiliates may be restricted or forbidden.
    • Research operator policies before launching

    Michigan (Moderate, Affiliate-Friendly)

    RequirementYour StatusDetails
    Age verification[ ] ImplementedIP geolocation acceptable for initial gating; third-party for verification
    Geo-fencing[ ] ImplementedMust block users outside MI
    Licensing model[ ] ConfiguredMultiple operators allowed (10+ licensed online)
    Affiliate requirements[ ] ReviewedMI operators generally allow publisher affiliates
    Advertising restrictions[ ] ImplementedModerate restrictions; fewer constraints than NY/NJ
    Responsible gambling[ ] IntegratedRequired; operator-managed mostly
    Sports integrity[ ] VerifiedOperators required to participate in integrity monitoring
    Compliance documentation[ ] ReadyMichigan Gaming Control Board requires standard documentation

    MI-Specific Notes:

    • License fee: $200K-$500K
    • Licensing timeline: 3-4 months
    • Affiliate-friendly; good for publisher expansion
    • Moderate regulatory burden

    Pennsylvania (Large, Established)

    RequirementYour StatusDetails
    Age verification[ ] ImplementedMulti-layer age verification required (IP + third-party minimum)
    Geo-fencing[ ] ImplementedMust block users outside PA
    Licensing model[ ] ConfiguredMultiple operators allowed (12+ licensed)
    Affiliate requirements[ ] ReviewedPA allows publisher affiliates; standard affiliate agreements
    Advertising restrictions[ ] ImplementedModerate; must avoid targeting youth
    Responsible gambling[ ] IntegratedRequired; state mandates funding for treatment
    Sports integrity[ ] VerifiedOperators must participate in official leagues' integrity programs
    Compliance documentation[ ] ReadyPA Gaming Control Commission requires detailed documentation

    PA-Specific Notes:

    • License fee: $250K-$500K
    • Licensing timeline: 6-12 months
    • Large market; established operators (FanDuel, DraftKings, BetMGM)
    • Good for publishers (affiliate-friendly, established rules)

    Illinois (Large, Progressive)

    RequirementYour StatusDetails
    Age verification[ ] ImplementedStandard (IP + third-party)
    Geo-fencing[ ] ImplementedMust block users outside IL
    Licensing model[ ] ConfiguredMultiple operators (10+ licensed)
    Affiliate requirements[ ] ReviewedIL allows publisher affiliates
    Advertising restrictions[ ] ImplementedModerate; fewer constraints than northeast
    Responsible gambling[ ] IntegratedRequired; operators manage education/funding
    Sports integrity[ ] VerifiedStandard requirement for operators
    Compliance documentation[ ] ReadyIL Gaming Board documentation requirements

    IL-Specific Notes:

    • License fee: $200K-$500K
    • Licensing timeline: 4-6 months
    • Progressive market; good for growth
    • Publisher-friendly (allow affiliates)

    Ohio (Accessible, Growing)

    RequirementYour StatusDetails
    Age verification[ ] ImplementedStandard (IP + third-party)
    Geo-fencing[ ] ImplementedMust block users outside OH
    Licensing model[ ] ConfiguredMultiple operators (8+ expected to launch 2026)
    Affiliate requirements[ ] ReviewedOH allows publisher affiliates
    Advertising restrictions[ ] ImplementedRelatively permissive; fewest restrictions among major states
    Responsible gambling[ ] IntegratedRequired; standard implementation
    Sports integrity[ ] VerifiedStandard requirement
    Compliance documentation[ ] ReadyOH Gaming Commission documentation

    OH-Specific Notes:

    • License fee: $250K-$500K
    • Licensing timeline: 2-3 months (fastest among major states)
    • Most permissive advertising rules
    • Excellent for publishers (low regulatory burden)

    Virginia (Medium Market, Moderate)

    RequirementYour StatusDetails
    Age verification[ ] ImplementedStandard
    Geo-fencing[ ] ImplementedMust block users outside VA
    Licensing model[ ] ConfiguredMultiple operators (4-5 licensed)
    Affiliate requirements[ ] ReviewedVA allows publisher affiliates
    Advertising restrictions[ ] ImplementedModerate
    Responsible gambling[ ] IntegratedRequired; standard
    Sports integrity[ ] VerifiedStandard
    Compliance documentation[ ] ReadyVA Gambling Commission

    VA-Specific Notes:

    • License fee: $100K-$250K
    • Licensing timeline: 3-4 months
    • Moderate regulatory burden
    • Good entry market for publishers

    Arizona (Medium, Moderate)

    RequirementYour StatusDetails
    Age verification[ ] ImplementedStandard (IP + third-party minimum)
    Geo-fencing[ ] ImplementedMust block users outside AZ
    Licensing model[ ] ConfiguredMultiple operators (10+ licensed)
    Affiliate requirements[ ] ReviewedAZ allows publisher affiliates
    Advertising restrictions[ ] ImplementedModerate; some native advertising limits
    Responsible gambling[ ] IntegratedRequired
    Sports integrity[ ] VerifiedOperators must report suspicious activity
    Compliance documentation[ ] ReadyAZ Gaming Department

    AZ-Specific Notes:

    • License fee: $250K-$500K
    • Licensing timeline: 4-6 months
    • Growing market
    • Moderate regulatory burden

    Part 4: Technology Stack Recommendation by State Tier

    Tier 1 States (NY, PA, NJ): Enterprise Grade

    Recommended setup:

    1. AGE VERIFICATION
       ├─ Layer 1: IP estimation (identify obvious <18)
       ├─ Layer 2: Third-party verification (email/phone-based)
       └─ Layer 3: ID verification (KYC - for operators, not necessary for publishers)
    
    2. GEO-FENCING
       ├─ MaxMind GeoIP2 (IP-based)
       ├─ VPN detection (Maxmind)
       └─ Manual override with verification
    
    3. CONTENT COMPLIANCE
       ├─ Claims checking (automated content review)
       ├─ Responsible gambling integration
       └─ Affiliate disclosure enforcement
    
    4. MONITORING
       ├─ Real-time compliance dashboards
       ├─ Alert system for violations
       └─ Audit trail logging
    
    5. INTEGRATION
       ├─ BetTech platform (FairPlay) for compliance engine
       └─ Custom state-specific rules
    

    Cost: $500K-$2M annually (platform + licensing + staff)

    Timeline: 8-12 weeks implementation

    Tier 2 States (CO, MI, IL): Mid-Market Grade

    Recommended setup:

    1. AGE VERIFICATION
       ├─ Layer 1: IP estimation
       └─ Layer 2: Third-party verification (if needed)
    
    2. GEO-FENCING
       ├─ MaxMind GeoIP2
       ├─ VPN detection
       └─ User override
    
    3. CONTENT COMPLIANCE
       ├─ Affiliate disclosure
       ├─ Responsible gambling info
       └─ Basic claims checks
    
    4. MONITORING
       ├─ Monthly compliance reports
       └─ Audit trail (basic)
    
    5. INTEGRATION
       ├─ BetTech platform (FairPlay) OR
       └─ Custom implementation
    

    Cost: $200K-$500K annually

    Timeline: 6-8 weeks implementation

    Tier 3 States (OH, VA, AZ): Accessible Grade

    Recommended setup:

    1. AGE VERIFICATION
       └─ IP geolocation (sufficient for most cases)
    
    2. GEO-FENCING
       ├─ IP geolocation
       └─ Basic VPN detection
    
    3. CONTENT COMPLIANCE
       ├─ Affiliate disclosure
       └─ Responsible gambling info
    
    4. MONITORING
       └─ Basic audit trail
    
    5. INTEGRATION
       └─ Basic implementation (in-house or lightweight BetTech)
    

    Cost: $50K-$150K annually

    Timeline: 4-6 weeks implementation


    Part 5: Regional Expansion Strategy

    Strategy 1: Northeast Focus (NY, NJ, PA, CT)

    Pros:

    • Largest US betting market
    • Well-established operators
    • Large population (sports fans)

    Cons:

    • Highest regulatory burden
    • Affiliate restrictions (especially NJ)
    • Expensive licensing

    Best for: Established operators, national brands, operators with capital

    Timeline to profitability: 18-24 months

    Strategy 2: Midwest Focus (IL, MI, OH, PA)

    Pros:

    • Moderate regulatory burden
    • Affiliate-friendly
    • Growing market
    • Lower cost of entry

    Cons:

    • Smaller than Northeast (except PA)
    • Competitive

    Best for: Regional publishers, growing operators, cost-conscious entrants

    Timeline to profitability: 12-18 months

    Strategy 3: Western Focus (AZ, Colorado)

    Pros:

    • Accessible licensing
    • Low regulatory burden (Colorado especially)
    • Growing population
    • Affiliate-friendly

    Cons:

    • Smaller markets
    • Less established infrastructure

    Best for: Publishers, cost-conscious operators, test markets

    Timeline to profitability: 9-12 months

    Strategy 4: Multi-Regional (Best Practice)

    1. Phase 1 (Months 1-3): Launch in 2-3 accessible states (CO, OH, VA)
    2. Phase 2 (Months 4-6): Add 2-3 tier-2 states (MI, IL)
    3. Phase 3 (Months 7-12): Add 2-3 tier-1 states (PA, likely not NY/NJ for affiliates)
    4. Phase 4 (Months 13+): Continue expansion to 10-20+ states

    Total investment: $2M-$5M+ for 10-state operation


    Part 6: Technology Vendor Evaluation

    When choosing a BetTech platform for multi-state compliance, evaluate these criteria:

    Must-Have Criteria

    CriterionWhat to Look ForExample Vendors
    Multi-state rulesPlatform has pre-built rules for 10+ US statesFairPlay, Kambi, GVC (Genius)
    Real-time updatesRules update automatically when states changeFairPlay (automated), others (manual)
    Geo-fencingBuilt-in state-level geo-fencingFairPlay, Kambi
    Age verification integrationAPI to integrate third-party age verificationMost major vendors
    Compliance monitoringDashboards showing compliance metricsFairPlay, some others
    Audit trailComplete logging of compliance decisionsRequired; most vendors support
    API-firstREST API for integration (not just UI)FairPlay, Kambi, others

    Nice-to-Have Criteria

    • Automated claims checking
    • Responsible gambling tool integration
    • Multi-language support
    • Affiliate management
    • Publisher-specific features

    Cost Models

    Per-transaction: $0.001-$0.01 per transaction

    • Good for high-volume operators
    • Scales with revenue

    Monthly flat fee: $5K-$50K/month

    • Good for publishers, smaller operators
    • Predictable cost

    Licensing + transaction fee: Hybrid

    • Typical for large operators

    Part 7: Compliance Checklist (Printable)

    Pre-Launch Checklist (per state)

    STATE: _____________
    LAUNCH DATE: _____________
    
    [ ] REGULATORY REVIEW
        [ ] Read state gaming commission requirements
        [ ] Download official guidance documents
        [ ] Identify any state-specific restrictions
        [ ] Contact state gaming commission (optional: notify them of plans)
    
    [ ] AGE VERIFICATION
        [ ] Implement age verification system
        [ ] Test accuracy (aim for 95%+)
        [ ] Document verification method
        [ ] Set up audit trail logging
    
    [ ] GEO-FENCING
        [ ] Implement state-level geo-fencing
        [ ] Test from multiple locations
        [ ] Test VPN detection
        [ ] Document geo-fencing accuracy
        [ ] Set up user override process
    
    [ ] CONTENT COMPLIANCE
        [ ] Audit all betting content for claims violations
        [ ] Add required disclaimers
        [ ] Add responsible gambling information
        [ ] Verify affiliate disclosure is clear
        [ ] Remove prohibited claims
    
    [ ] AFFILIATE AGREEMENTS
        [ ] Review operator affiliate agreements
        [ ] Confirm what content operators allow
        [ ] Confirm what claims are prohibited
        [ ] Get written confirmation of compliance requirements
    
    [ ] MONITORING & DOCUMENTATION
        [ ] Set up compliance monitoring dashboard
        [ ] Document all compliance measures
        [ ] Create audit trail (ready for regulator inquiry)
        [ ] Set up alert system for violations
    
    [ ] SOFT LAUNCH (10% of traffic)
        [ ] Deploy to 10% of users
        [ ] Monitor for 2 weeks
        [ ] Fix any issues
        [ ] Prepare for full launch
    
    [ ] FULL LAUNCH
        [ ] Deploy to all users
        [ ] Monitor closely for first month
        [ ] Respond to any compliance issues
        [ ] Prepare for regulator inquiry (if any)
    
    [ ] ONGOING (Monthly)
        [ ] Review compliance metrics
        [ ] Check for regulatory updates
        [ ] Test accuracy of systems
        [ ] Update documentation
        [ ] Respond to user appeals/overrides
    

    Call to Action

    If you're expanding to multiple US states, you need systematic compliance infrastructure. Don't try to manage 30 different rulesets manually.

    Start with these actions:

    1. Identify target states: Where is your audience? Where do operators want to partner with you?

    2. Get expert counsel: Hire a gaming lawyer in at least one state. They can advise on your specific situation.

    3. Build/buy technology: Evaluate BetTech platforms (like FairPlay) vs. building in-house. Platforms are usually faster.

    4. Start with 2-3 states: Launch in accessible markets (CO, OH, VA) first. Learn, iterate, expand.

    5. Document everything: Keep audit trails, compliance documentation, testing results. Regulators will ask.

    FairPlay's platform is specifically designed for multi-state US compliance. We have pre-built rules for 30+ states and automated updates. If you'd like to discuss your expansion strategy, schedule a consultation.

    The US betting market is fragmented, but with the right technology and process, it's navigable. Successful multi-state operators aren't those who ignore compliance—they're those who automate it.


    Further Reading


    Published: March 23, 2026 Updated: March 23, 2026 Author: FairPlay Insights Audience: B2B Compliance Officers, US Market Leads, CTOs Read Time: 22 minutes

    Frequently Asked Questions

    Share

    Ready to explore BetTech for your business?

    Talk to the FairPlay team about how our platform can work for your business.

    Get Started

    Related Articles

    Explore More Insights