Great Britain is among the most demanding gambling regulators in the world. Nothing about a UKGC submission rewards optimism — but the technical requirements are clear, and they are mostly about evidence and player protection.
The UK Gambling Commission sets the highest bar most operators will encounter, particularly on player protection, marketing conduct and the operator's ability to demonstrate control over its own systems.
Responsible-gambling functionality is not a feature set here — it is a licence condition. Deposit and loss limits, session controls, reality checks and self-exclusion have to be enforced by the platform, evidenced in logs, and immune to circumvention through marketing or a second account.
The other recurring theme is reconstruction. If a player disputes a round or the Commission asks what happened, the answer needs to come from an immutable record, not from an engineer's recollection.
Limits and exclusions applied in the money path rather than in the interface, so they cannot be bypassed by a different client or a direct API call.
Event-sourced rounds and hash-chained administrative logs, anchored so their state at a point in time can be demonstrated afterwards.
Role-based access with six administrative roles, multi-factor authentication, hashed API keys with HMAC request signing, and tenant isolation enforced at the database level.
Note: licensing requirements change, and nothing on this page is legal advice. Confirm current obligations with qualified counsel in your target market before committing. Slotty Labs supplies technology and certification evidence — it does not hold or provide gambling licences.
Regulatory approval attaches to a licensed operator, not to a supplier in the abstract. The platform is built to GLI-19 standards with evidence prepared for the UK, and certification is completed as part of an operator's own submission.
Responsible-gambling tooling — deposit, loss and session limits, reality checks, time-outs and self-exclusion — is enforced at runtime by the jurisdiction engine and required in every deployment.
Every round is event-sourced and deterministically replayable, tied to the exact game version that produced it, so the round can be reconstructed outcome by outcome rather than described.
We will walk through what the platform enforces there, what evidence ships with it, and what remains your obligation as the licensee.