Regulators fined Evolution 4.75m pounds and Keno Victoria $75,000 eight days apart

Two gambling regulators, eight days apart in July 2026, published decisions that punished not what a company did at the point of betting but what its identity and due diligence machinery failed to do. On 15 July the Victorian Gambling and Casino Control Commission fined Keno (VIC) Pty Ltd $75,000. On 23 July the Gambling Commission in Britain announced that Evolution Malta Holding Limited would pay 4,750,000 pounds.

The Victorian decision, signed by the chair, Chris O'Neill, records that on 6 October 2024 a person who had self-excluded from Keno was able to create a second online account, deposit money and play online keno on 6 and 7 October. The Commission found two contraventions of the technical standards dated 2 June 2022: paragraph 7.2.1, which permits accounts only for adults who have not self-excluded, and paragraph 7.2.2, which bars more than one account per licensee. Those breached clause 3.1(a) of the related agreement of 21 February 2022, which is a ground for disciplinary action under section 6A.3.26(e) of the Gambling Regulation Act 2003 (Vic).

The mechanism is the interesting part. The customer had not passed automated identity verification, and Keno's system at the time allowed what the decision calls a restricted play period: an account could be opened and used before a human checked who the holder was, capped at $1,000 a week in deposits and spending with no withdrawals permitted. Manual verification was required within fourteen days, cut to three days from 18 February 2025. Keno told the Commission the episode was a one off caused by a customer deliberately using different details, said it closed both accounts, refunded the money and compensated the customer, and asked for a formal caution instead of a fine. The Commission fined it, while noting that the statutory maximum was $987,950 and that these breaches were not among the most serious.

The British case is about supply rather than play. The Commission's public statement of 23 July 2026 records that Evolution's live casino games appeared on six websites operated by two operators that held no British licence, and that large volumes of British consumers visited those sites between December 2023 and November 2024. The Commission identified the games in August 2024 and told Evolution in December 2024, at which point the company confirmed the sites were genuine and geo-blocked them permanently. Breaches were found across the period April 2024 to January 2025 of licence conditions 12.1.1 and 12.1.2, which cover money laundering risk assessment, policies, procedures and controls. The director of enforcement, John Pierce, said the risk assessment was outdated and had failed to consider adequately the risk of the games being made available through unlicensed operators.

The 4,750,000 pounds is a payment in lieu of a financial penalty under a regulatory settlement, not a court finding. Evolution also agreed to an added licence condition requiring an independent audit of the relevant controls within twelve months, to publication of a statement of facts, and to a contribution towards the Commission's costs.

Neither decision sits in isolation. On 30 June 2026 the same regulator required Petfre (Gibraltar) Limited to pay 900,000 pounds over safer gambling failures, including a seven day gap between flagging a customer for review and reassessing them, during which one customer lost 17,900 pounds in 24 hours. On 16 July 2026 the Commission published the 2025 Gambling Survey for Great Britain, drawn from just over 20,000 participants surveyed between January 2025 and January 2026, which found 47 per cent of adults had gambled in the past four weeks and 2.4 per cent scored eight or more on the Problem Gambling Severity Index. The report warns that its figures are not comparable with earlier surveys and should not be used to read a trend.

The identity plumbing is under strain more broadly. iGaming Business reported on 13 August 2026 that the Commission had found poor identity data undermined its financial risk assessment pilot, with initials in place of full names, nicknames and commercial rather than residential addresses defeating matching against credit reference records and weakening protections including the self-exclusion scheme GAMSTOP. On 16 July 2026 the Malta Gaming Authority named three websites falsely claiming to be licensed by it.

What is not known is larger than what is. Neither regulator says how many other customers slipped through the same gaps. The Commission has not named the six websites or the two operators. Full data from the risk assessment pilot is not due until September 2026. And the company that agreed to the largest of these settlements is itself in play: iGaming Business reported on 15 August 2026 that Candle Lake, an investment vehicle controlled by Kenneth Dart, had offered SEK695 a share for Evolution, valuing it at about SEK131.7 billion, with an acceptance period running from 17 August to 15 September 2026, and that the discovery of the games on unlicensed sites had brought the company close to suspension of its British licence. Who owns the licensee, and whether an audit ordered in July survives a change of control, is not yet settled.