Broader customer due diligence requirements: Gambling operators must monitor not only transactions above €2,000, but also linked and fragmented transactions below the threshold to detect attempts to avoid scrutiny. This includes deposits, wagers, winnings, and activity across online and offline channels.
Mandatory risk-based compliance framework: Operators must conduct business-wide risk assessments and demonstrate how they identify, mitigate, and monitor AML risks. National authorities will also perform sector-level risk assessments.
Increased focus on cross-border and digital payment risks: The regulation places greater emphasis on monitoring activities involving multiple jurisdictions, digital wallets, cryptocurrencies, and other emerging payment technologies.
Compliance deadline and significant penalties: Gambling operators must comply by July 2027. Non-compliance may result in penalties of up to €10 million or 10% of annual turnover.
„The challenge is not simply meeting new AML requirements. It is doing so while preserving the customer experience.” - Dániel Bognár, Director, Deloitte Central Europe, Gambling Centre of Excellence
Upgrade customer identification and transaction-monitoring systems
Enhance AML and KYC processes
Invest in data integration and analytics
Balance compliance and customer experience
Perform game risk assessments to support exemption eligibility
„Compliance is no longer just a regulatory requirement - it is becoming a competitive advantage built on transparency, technology, and trust.” - Miklós Zaránd, Partner, Deloitte Central Europe, Hungarian Market Leader
Assess your AML readiness and define a clear roadmap
Modernize AML, KYC and transaction monitoring capabilities
Build resilient risk and governance frameworks
Deliver end-to-end compliance transformation
Select the right technology providers
Access the full EU AML Regulation here and explore the detailed requirements impacting gambling operator!