Gambling Commission Issues New Guidance on AI-Driven Player Protection Tools for Online Casinos

21 September 2026

The UK Gambling Commission has published its first set of guiding principles on the use of artificial intelligence in the gambling sector. As the regulator rolls out its strategy, online casino operators will need to demonstrate that their AI systems identify, act on, and evaluate potential gambling harms responsibly.

What the New AI Guidance Says

The Commission states plainly that any AI use should be lawful, transparent, and responsible. Specifically, the Commission identifies five core areas for its use of AI in gambling oversight.

The Commission will use AI to understand and regulate use of the technology within the industry. Internally, it anticipates that AI helps make its own service delivery more efficient and effective.

But the Commission is also interested in using AI for broader public benefits, in particular to build a better understanding of consumer behavior and market trends. And the Commission intends to use AI to future-proof its regulatory oversight against emerging risks.

As such, the Commission anticipates that AI will "better understand the gambling market and consumers" and give the regulator a "better understanding" of how best to apply its licensing and oversight functions. The aim is to identify areas of concern, whether to the Commission, licensees or their patrons, about the gambling sector.

How This Affects Online Casinos

The Commission is clear that it will use AI to ensure its own operations and oversight are effective and efficient. But its use of AI for industry oversight takes the form of establishing expectations and requirements for operator use of AI systems.

Operators' machine learning must actively automate aspects of compliance and risk management. Specifically, Policy 3.4.3 of the Social Responsibility Code requires licensees to implement effective customer interaction systems. Where automated systems are a part of such interactions, the Commission makes clear that human oversight and review remain necessary.

The Commission describes the operator's three key steps: first, to identify signs of potential gambling harm and trigger appropriate alerts; second, to take appropriate action in response to an alert; and third, to evaluate the effectiveness of its responses over time. Those principles will guide AI-enabled customer evaluations according to the Commission's preferences and expectations.

Why This Matters Now

The Commission does not specify any immediate changes to its approach to AI specifically, or its oversight of operators' use of the technology. But the guidance does suggest that any operator's use of AI must comply with four basic principles: it must be lawful, appropriately transparent, responsible, and subject to appropriate human oversight and review.

Moreover, those principles establish the framework within which the regulator engages on AI more broadly. All operators are required to demonstrate understanding of harm prevention tools, and the Commission's guidance implies that, where AI is involved, it will be sensitive to compliance and regulatory concerns.

To date, the Commission's formal requirements are not written in terms of AI. Instead, operators must ensure their technology complies with the Commission's Social Responsibility Code. Those requirements are broad, but on the subject of AI, licensees must be able to demonstrate these basic requirements going forward: that their system is lawful, appropriately transparent, responsible, and subject to human supervision.

What Operators Should Do Next

The AI guidance confirms the Commission's focus on responsible gambling technology, but it does not specify a new AI mandate, at least not yet. The established framework that requires operator scrutiny is found in the Social Responsibility Code.

Under 3.4.3, operators must monitor activities including deposit patterns, account history, use of responsible gambling tools, and the identification of behavioral markers by account holders. Those evaluations must conclude in one of three outcomes – identification, action, or evaluation – and since 31 October 2022, the guidance has explicitly included human oversight requirements.

As a result, the key focus must be on establishing a compliance framework that follows from AI-enabled identification and response and ensures that these decisions are appropriate, transparent, and justifiable to the regulator. What is needed is a system which incorporates financial and behavioral metrics, not an AI mandate over all operations.