What is the approved control system an online casino must run?
It is the operating plan an online casino submits to the Gambling Regulatory Authority with its licence application. The Authority must approve it, and running the casino under it becomes a licence condition (Gambling Control Act, 2025, ss.67 and 68). Breaking it can lead to revocation and an offence.
The short definition
The Act uses the phrase "gambling control system" in Part VIII, which deals with online gambling. An applicant for an online casino licence must submit a proposed system, and the Authority considers it with or without variation (s.67(2)). Once the licence is granted, the licensee must conduct the activity under a system the Authority has approved (s.68(1)).
This sits on top of the licence itself. For the wider list of duties, see what Kenyan law requires of an online casino.
Where the system appears in the licensing steps
Regulation 11 of the Licensing Regulations, 2026 repeats the requirement for the application. The proposed system must accompany the application and be compatible with the Authority's central management system (r.11(2)(c)). The same list asks for other items, shown below so the system is seen in its place.
| Item filed with an online licence application | Reference |
|---|---|
| Proposed gambling control system compatible with the Authority central management system | r.11(2)(c) |
| Valid Tax Compliance Certificate and PIN certificate from the Kenya Revenue Authority | r.11(2)(b) |
| Proof of gambling capital set out in the Third Schedule | r.11(2)(e) |
| Evidence of anti-money laundering and counter-terrorism financing compliance, including policies, procedures and staff training records | r.11(2)(f) |
| Proposed platform, domain name and games provider from a supplier licensed by the Authority, with a copy of the agreement | r.11(2)(g) |
The Act separately requires the applicant to deposit security as prescribed (s.67(3)). That is not part of the system, but it is part of the same grant.
What the Authority will not approve without
Section 68(2) says the Authority shall not approve a system unless the licensee provides for eight areas. The table below follows the Act's own list, with a plain reading beside each.
| Area in s.68(2) | Plain reading |
|---|---|
| (a) Online security of information | Protecting the data and systems the casino runs on |
| (b) Safety and security against criminal activities | Guarding the operation against crime |
| (c) Online payment system | How money moves in and out of player accounts |
| (d) Protection measures against under age gambling | Keeping people under 18 out |
| (e) Protection measures against vulnerability in gambling | Safeguards for people at risk of harm |
| (f) Awareness and education | Telling players about risks and help |
| (g) Responsible advertising | Advertising kept within the rules |
| (h) Data protection measures under the Data Protection Act | Handling personal data lawfully |
The Act does not set out technical standards in these eight lines. Detailed duties sit elsewhere, for example regulation 98 of the Operations Regulations, which requires a licensee to develop and implement internal control systems to detect and prevent money laundering, terrorism financing, fraud and other criminal conduct.
What the Authority sees
Section 68(5) tells the Authority to set up a framework for real time monitoring of casinos and online gambling. The Communications Authority of Kenya and other relevant government agencies may access it. To make that possible, section 68(6) requires an operator to give the Authority:
- the platforms for participation, such as an online website platform;
- particulars of the charges the operator levies;
- particulars and location of the servers that show how a player is registered and deregistered, and of all other servers;
- a valid telecommunication licence, and any other information the Authority requires.
For mobile online gambling, particulars of network connectivity with two links to mobile operators must be provided (s.68(7)). The operator must also keep a customer care centre in Kenya to monitor and respond to consumer issues (s.68(8)).
Why approval is a licence condition
Section 68(3) says the Authority shall impose the approved system as a condition of the licence. Section 68(4) adds that failure to comply with it shall lead to revocation of the licence and an offence. So the system is not a one-off filing: it is a standing duty tied to the licence for as long as it is held.
Section 69 shows the span the system covers. An online gambling transaction starts when a player deposits into a gaming account and ends when the player withdraws from it. The payout deadlines inside that span are covered in online casino payout rules in Kenya.
Three common misreadings
First, the system is not a certificate shown to players. The Act describes it as something submitted to the Authority and approved by it, and it says nothing about display on a website. Second, approval is not a rating of the casino. The text asks only whether the eight areas are provided for, and it does not compare operators.
Third, the system does not replace the licence. Section 67(1) makes the licence the starting point, and the system is then imposed as a condition of that licence (s.68(3)). A casino with a system but no licence, or a licence but no approved system, would be missing a legal requirement either way.
What a player can check
An approved system is an operator-side document, and the sources read for this page do not say it is published. What a player can verify is whether the operator holds a licence at all. Start with the register of licensed online casinos and the guide to reading the Authority's list of licensed operators. The register describes the 2025/26 trading period (page last modified 2026-03-19), so confirm against the live list on the Authority's website.
A site with no Kenyan licence has no system approved by the Authority and none of these duties attach to it. Whether such a site is lawful at all is answered in is online casino legal in Kenya. This guide is general information, not legal advice.
Questions and answers
Does the Act define the term gambling control system?
The sections read for this page do not give a separate definition. They describe what the system must provide for (section 68(2)) and say it is submitted with the application (section 67(2)) and approved by the Authority (section 68(1)).
Who must have an approved system?
A person licensed to carry out an online gambling activity, which section 67(1) lists as an online bookmakers licence, an online lottery licence or an online casino licence.
Can the Authority change the system an applicant proposes?
Yes. Section 67(2) says the proposed system shall be duly considered by the Authority with or without variation.
What happens if a licensee ignores its approved system?
Section 68(4) says failure to comply with the requirements of the approved system shall lead to revocation of the licence and an offence.
Can I read a casino's approved system?
The sources read for this page do not say that approved systems are published. What a player can check is whether the casino appears on the Authority's list of licensed gaming companies.
Does an approved system guarantee that I will be paid or will win?
No. It is a regulatory condition on how the operator runs the business. It says nothing about the outcome of any bet, and long play at a casino is expected to cost money.
Sources
- Gambling Control Act, 2025 (No. 14 of 2025), ss.67, 68, 69, accessed 2026-10-05
- Gambling Control (Licensing) Regulations, 2026 (L.N. 111), r.11, accessed 2026-10-05
- Gambling Control (Conduct of Gambling Operations) Regulations, 2026 (L.N. 112), r.98, accessed 2026-10-05