AGLC iGaming Go-Live Compliance Guide for Operators & Suppliers.
A plain-language breakdown of Alberta's go-live compliance requirements for iGaming operators, platform providers, and Goods or Services Suppliers (GSSs). Based on the official AGLC Internet Gaming Go-Live Compliance Guide (February 2026). Contacts, timelines, documentation checklists, and ATF certification requirements — everything an operator needs to understand before entering Alberta's market.
Completing AGLC registration and go-live compliance requirements does not by itself authorise gaming operations in Alberta. Operating authority rests with the Alberta iGaming Corporation (AiGC), which manages internet gaming and establishes operating agreements with AGLC-registered operators. AiGC may impose additional requirements beyond those listed here.
Who This Guide Applies To
Alberta's go-live compliance framework applies to all iGaming registrants, with requirements varying by registrant type. The AGLC iGaming Compliance Branch oversees operator and GSS compliance against these go-live measures, with future updates expected to cover ongoing post-launch compliance requirements.
The framework distinguishes between three registrant categories. Operators face the broadest set of requirements — they host the online gaming site and carry the highest regulatory burden. GSSs running critical gaming systems (platform providers, core system suppliers) face substantive but narrower requirements. Other GSSs (e-wallet providers, oddsmakers, integrity monitors, accredited testing facilities) face a lighter documentation requirement set.
For most operators entering Alberta from other regulated markets — particularly those already holding AGCO licences in Ontario — many of these requirements will build on existing compliance infrastructure rather than starting from zero. The key differentiator is Alberta-specific documentation: the Control Activity Matrix mapped to AGLC Standards, and the Standards Gap Analysis.
Required Documentation — At a Glance
Which documents each registrant type must submit before going live in Alberta.
Due Diligence Disclosure Documents
All registrant types — operators, critical GSSs, and other GSSs — must complete the due diligence process. This is the first step in any AGLC iGaming application. Contact the Due Diligence Unit at DueDiligence@aglc.ca to initiate the application package.
The Due Diligence team will arrange a "handshake" call covering: the full application process, guidance on disclosure forms, a list of additional documents required, and information on applicable application and registration fees.
False or misleading statements in any disclosure document may result in refusal or revocation of registration. AGLC requires accurate and complete information at all stages of the application process.
Compliance Documents
Contact iGamingCompliance@aglc.ca to initiate the compliance application package.
All registrants must establish two types of regulatory reporting as defined in the AGLC Internet Gaming Notification Matrix:
Real-time or near-real-time reporting of specific events as they occur — security incidents, system outages, integrity concerns, and similar events that require immediate AGLC notification.
Scheduled periodic reporting covering operational data, player metrics, financial summaries, and other recurring regulatory submissions. A reporting portal is under development; AGLC will distribute access prior to submission deadlines.
Operators must submit a formal analysis comparing their current controls, processes, and technology against the AGLC Standards and Requirements for Internet Gaming. The submission must identify gaps and provide documented evidence of a plan to address them before going live.
For operators with existing AGCO licences in Ontario, this analysis represents a mapping exercise — aligning existing compliance documentation against Alberta-specific Standards rather than building from scratch.
Operators must design and implement controls meeting the AGLC Standards and summarise them in a Control Activity Matrix. The CAM must cover all gaming site controls — including controls operated by third-party platform providers. An independent audit is required as part of the CAM submission, conducted by either internal audit or an external auditor acceptable to AGLC.
Technology Compliance Confirmation
Operators and critical GSSs must submit a signed letter confirming technology compliance with AGLC Standards before going live. Annual renewal required.
The confirmation must cover the entire Alberta iGaming technology stack:
- Platform and underlying infrastructure
- Operating systems and databases
- Network devices
- Gaming software and all applications
- All affiliated GSS providers (with entity names)
- Third-party technology integrations
- Player geolocation controls — dynamic monitoring, circumvention detection
The confirmation must cover:
- Gaming servers
- Operating systems and databases
- Network devices
- Gaming software and all applications
- All affiliated GSS providers (with entity names)
- Third-party technology integrations
All operators must hold minimum SOC2 Type 1 attestation upon go-live for all iGaming sites named in the registration. Certification firms must be peer-reviewed AICPA members.
Within two years of go-live, operators must achieve ISO 27001 certification or SOC2 Type 2 attestation (or an AGLC-approved equivalent). SOC2 scope must cover security, availability, confidentiality, privacy, and processing integrity.
Operators must submit independent security vulnerability assessments and penetration test results covering Alberta production infrastructure and applications. Each submission must include management responses detailing risk assessment, remediation plans, and compensating controls.
Accredited Testing Facility (ATF) Certification
All operators and critical GSSs must ensure technologies are certified by an AGLC-registered ATF before deployment in Alberta.
ATF certification applies to games, random number generators (RNGs), and iGaming components that process, determine, display, or log details about player bets — including slot and table games, sports and event betting systems, poker, and other card games. For live dealer games, physical RNGs with electronic components (roulette wheels, dice tables, card shufflers with electronic elements) also require certification.
AGLC may grant temporary approval in low-risk cases; discuss individual circumstances with the iGaming Compliance Branch. AGLC will also consider accepting games previously approved in other jurisdictions, provided they were tested by an ATF registered with AGLC.
Cosmetic or minor changes unrelated to the Standards — bug fixes, language updates, UI changes. Confirm internally that changes are non-regulatory; no ATF submission required.
Changes affecting compliance with the Standards or addressing regulatory concerns. Must be fully certified by an ATF before the updated version is deployed.
Urgent live fixes impacting game integrity or Standards compliance. Deploy immediately to protect integrity; submit for ATF certification within 5 business days of release.
Gaming Site Diagram (Operators Only)
A visual representation of the full architecture and component interactions of the operator's platform and related systems.
Front-End Systems
Player interface components — website architecture, mobile application structure, and user-facing systems.
Back-End Systems
Game servers, random number generators (RNG), transaction processing infrastructure, and core platform components.
Third-Party Integrations
Payment gateways, identity verification providers, platform providers, and all external system integrations.
Security Layers
Firewalls, encryption mechanisms, monitoring tools, and the controls preventing unauthorised access or circumvention.
Data Flows
How player data, bets, and outcomes move through the system — end to end from player action to settlement and reporting.
AGLC iGaming Key Contacts
Compliance application packages, incident notifications, regulatory submissions, registration and renewals.
Application packages, disclosure forms, registration fees. Also handles changes to ownership, financial interest, and key employees post-registration.
Operating authority for Alberta iGaming. Manages operating agreements with AGLC-registered operators. AML and financial reporting submissions.