Pennsylvania iGaming Regulations: 2026 Operator Guide

Pennsylvania iGaming regulations govern how a licensed operator runs an online casino once the state grants it an interactive gaming certificate. Act 42 of 2017 sets the base rule. The Pennsylvania Gaming Control Board then turns that statute into operating detail through the interactive gaming chapters of 58 Pa. Code. A certificate gets a brand into the market, but these rules decide how it trades day to day. This guide covers the legal framework, who may operate, the 58 Pa. Code chapters, certificates and skins, player verification and AML duties, testing and geolocation, responsible gaming, advertising, the compliance calendar, and where operators fall short.

What Pennsylvania iGaming regulations cover

Pennsylvania iGaming regulations apply once a certificate is granted, not before. Act 42 of 2017 sets the base rule and gives the PGCB its rule-making and enforcement power. The board then turned that statute into operating detail through 58 Pa. Code, and it updates the chapters through published rulemakings. Online casino play went live in Pennsylvania in July 2019.

So the framework does three things at once. First, it decides who may operate. Second, it sets how a platform must be built, secured, and tested. Third, it defines the ongoing duties an operator owes to players and to the state. If you are still at the entry stage, our guide to the Pennsylvania iGaming licence covers eligibility, the certificate routes, and the full fee schedule. This article focuses on the operating rules that apply after launch.

Pennsylvania iGaming regulations under Act 42 of 2017

Act 42 of 2017, signed on 30 October 2017, added interactive gaming to Title 4, Chapter 13B of Pennsylvania law. It reserves online gaming for the state’s licensed land-based casinos, known as slot machine licensees. There is no standalone online-only licence for a new market entrant.

Three routes lead to the market. A slot machine licensee can hold an interactive gaming certificate directly. If a casino does not take up its certificate, a qualified gaming entity can apply for it instead. A platform provider that runs games on behalf of a certificate holder holds an interactive gaming operator licence. For the board’s full remit and licence categories, see our guide to the Pennsylvania Gaming Control Board. You can read Act 42 of 2017 in full on the PA General Assembly site.

The 58 Pa. Code interactive gaming rules

The operating detail lives in 58 Pa. Code, in Chapters 801A to 817A. In practice you treat the individual chapter as the unit of compliance, not the part. The table below sets out the main chapters an online operator works with.

The board reviews an operator’s internal controls before a platform goes live, and it can require changes at any point after launch. Each site must be clearly branded, so a player always knows which certificate holder stands behind it. These 58 Pa. Code interactive gaming rules sit on the official code site, and Pennsylvania iGaming regulations flow from them chapter by chapter.

Interactive gaming certificates, brands and market structure

Pennsylvania issued 39 interactive gaming certificates in total, one each for interactive slots, interactive table games, and peer-to-peer poker across the state’s 13 licensed casinos. A certificate holder can run its games directly or through a licensed interactive gaming operator.

Act 42 originally limited a licensee to a single skin per certificate. The PGCB’s temporary regulations later removed that numeric limit, so a slot machine licensee may now deliver games through more than one skin. Every skin must still be clearly branded to show it operates on behalf of that licensee. Tax rates and revenue by operator sit outside this guide, which stays on the operating rules.

Player accounts, KYC, and AML duties

Pennsylvania iGaming regulations set strict rules for opening and running a player account. An operator verifies each player’s identity, age, and physical location before it accepts a real-money wager. It also screens the account against the self-exclusion list at registration and on an ongoing basis. A player must be 21 or older to hold an account.

Anti-money laundering duties sit next to identity checks. Operators apply the federal Bank Secrecy Act framework and file suspicious transaction reports for transactions of $5,000 or more. Failure to file is a misdemeanor. Operators keep player funds separate from operating accounts, so a player balance stays protected. Pennsylvania allows cashless wagering, but it does not accept cryptocurrency as a payment method for online gaming, so deposits run through approved fiat methods only. These duties need named owners inside the business, which is why our compliance and AML officer roles cover them day to day.

Technical standards, testing, and geolocation

Under Pennsylvania iGaming regulations, no platform reaches state players until the PGCB signs it off. The board’s Bureau of Gaming Laboratory Operations tests slot machines, table game devices, and platform software, and it also relies on approved independent test laboratories. Random number generators, game maths, and return-to-player values are certified first, before a game can accept a real wager. Pennsylvania also requires the gaming servers to sit inside the state, or in an approved facility that gives the PGCB real-time access, so an operator cannot run Pennsylvania play from a shared multi-state cloud.

Geolocation is a hard requirement. Every operator runs a location service that confirms the player is physically inside Pennsylvania and 21 or older, and it blocks anyone outside the state. Our platform testing and RNG certification team prepares this technical file before an application goes in.

Responsible gaming and self-exclusion

Pennsylvania runs a statewide self-exclusion programme, and the PGCB maintains the list. A player enrols for a set term: one year, five years, or lifetime. The board can also place a person on an involuntary exclusion list for cause, separate from the voluntary programme.

No licensed operator may open an account for, or take wagers from, an excluded person. Operators screen accounts against the list at registration and during play, monitor for signs of problem gambling, and offer limit and cool-off tools. Every site must also show responsible gaming messaging and the state helpline. A system outage does not pause these duties. The board sets out player options on its final published regulations pages.

Advertising and promotional rules

Pennsylvania iGaming regulations cover marketing too. Advertising must be factual and must carry responsible gaming messaging and the state helpline. Operators cannot target minors or self-excluded players in any campaign.

Promotional credits follow their own standard. Pennsylvania lets operators deduct promotional credits before tax under the “result of play” standard set by a 2014 ruling, so an operator must keep a digital audit trail proving an online bonus was earned as a result of play, not simply handed out. Affiliate marketing sits inside the operator’s compliance perimeter, because the operator answers for what its affiliates publish.

The operator compliance calendar

Getting live is the start, not the finish. Pennsylvania iGaming regulations impose recurring deadlines after launch, and first-time operators often underestimate them. The table below sets out the main ongoing obligations.

Tax runs at 54% on interactive slots and 16% on interactive table games and poker, applied after promotional credits. We cover the rate split, the local share assessment, and where the money goes in our guide to Pennsylvania interactive gaming tax and revenue. Missing a filing or a change-approval step is a compliance failure in its own right, even when the platform itself is sound.

Where operators fall short of Pennsylvania iGaming regulations

The suitability review is where most timelines slip. The PGCB weighs the character, honesty, integrity, and financial fitness of principals and key employees. It examines criminal history, prior licence actions in other states, and source of funds. A thin or inconsistent disclosure file is the most common reason a review stalls.

Operational gaps recur after launch too. Geolocation drift is the first, because a single wager from outside Pennsylvania breaches a core rule. Weak affiliate oversight is the second, since non-compliant marketing lands on the operator’s record. Late or incomplete monthly reporting is the third, and a missed suspicious transaction report deadline is its own violation. Our gaming licensing compliance team builds the disclosure file and the reporting schedule so these gaps stay off the table.

What a Pennsylvania iGaming licence does not cover

A Pennsylvania certificate authorises play by people physically inside Pennsylvania, and nothing more. It gives no access to any other US state, because each state runs its own regulator and its own market. As of 2026 Pennsylvania has not joined the Multi-State Internet Gaming Agreement, so poker liquidity stays in-state rather than pooling with other members.

A commercial brand cannot trade without a casino or certificate holder partner, so a platform provider needs both an operator licence and a casino deal. An operator that already holds a licence elsewhere still starts fresh here. Many groups weigh the New Jersey iGaming market and the Michigan iGaming licence alongside Pennsylvania as they plan a wider US footprint.

Planning your Pennsylvania market entry

Entry to Pennsylvania runs through a casino partnership or the qualified gaming entity route, a PGCB interactive gaming certificate or operator licence, and a certified platform. Build the disclosure file, the technical sign-off, and the compliance calendar together, not in sequence. To plan a Pennsylvania application and casino partnership, contact the DD Consultus advisory team at contact@licencegaming.com or +356 99408536.

Frequently asked questions

What law governs iGaming in Pennsylvania?

Online casino gaming in Pennsylvania runs under Act 42 of 2017, folded into Title 4, Chapter 13B of state law. The Pennsylvania Gaming Control Board sets the operating detail through 58 Pa. Code, Chapters 801A to 817A. The board updates those chapters through published rulemakings.

Who can legally operate an online casino in Pennsylvania?

A licensed casino can operate through an interactive gaming certificate, or a qualified gaming entity can apply if the casino does not take up its certificate. A platform provider that runs games on behalf of a certificate holder holds an interactive gaming operator licence. There is no standalone licence for a new entrant without a casino tie.

How many online brands can a Pennsylvania casino run?

Act 42 originally capped a licensee at one skin per certificate. The PGCB’s temporary regulations removed that numeric limit, so a slot machine licensee can now run more than one skin. Each skin must still be clearly branded to show it operates on behalf of that licensee.

Does Pennsylvania allow cryptocurrency for online gambling?

Pennsylvania allows cashless wagering, but it does not accept cryptocurrency as a payment method for online gaming. Deposits and withdrawals run through approved fiat payment methods only. Operators build their payment stack around that limit.

Do Pennsylvania iGaming regulations require geolocation?

Yes. Every operator must run a geolocation service that confirms the player is physically inside Pennsylvania and 21 or older before it accepts a wager. The system blocks any attempt to play from outside the state.

How does the Pennsylvania self-exclusion list work for operators?

The PGCB maintains a statewide self-exclusion list, and a player can enrol for one year, five years, or lifetime. Operators screen accounts against the list at registration and during play. No licensed operator may open an account for, or take wagers from, an excluded person.

What are the AML reporting duties for Pennsylvania online operators?

Operators apply the federal Bank Secrecy Act framework and file a suspicious transaction report for any transaction of $5,000 or more. Failure to file is a misdemeanor under state law. Player funds must stay separate from the operator’s own accounts.

Does a Pennsylvania iGaming licence let an operator serve other states?

No. A Pennsylvania certificate covers players physically located inside Pennsylvania only, enforced by geolocation. Each US state licenses operators on its own terms, so a wider footprint means a separate application in every state.