Know who did what, and why it was allowed.
Our approach to four questions every operator asks of a platform that holds player accounts and money movements.
Every sensitive action leaves a record
Actor, action, resource and time for changes to accounts, balances and settings. Requirement in the product design; implementation detail to be documented.
Roles decide what each person can do
Permissions per role and per action, with confirmation for sensitive changes. Role model to be agreed with each operator.
Operators can see the state of things
Clear status for integrations and movements, and errors that say what to do next. Monitoring practices to be documented.
Personal data shown only when needed
Masked by default in the backoffice, revealed by permission and recorded. Hosting and data-handling commitments to be confirmed.
The operator holds its licences and remains responsible for compliance in each jurisdiction. The platform provides configurable controls and records to support that work; on its own it does not make an operator compliant.