There is a pattern we keep seeing whenever a jurisdiction announces a first-time online casino licensing regime. The trade press writes it as a horse race — who's running, who's favoured, who's leaked an interest to a Reuters stringer in Sydney. The framing is always *which operator wins*. We think that is the wrong question. The right question is what the Department of Internal Affairs will actually test when the 2026 auction opens, and whether the operators currently being named — Bet365, 888, Betway — have the kind of public filings that survive that test. Once you ask the second question, the answer to the first one starts to look very different from what the headlines suggest.

The Online Casino Gambling Bill carves out 15 licences. New Zealand's online gambling market has, until now, been served by two layers: TAB NZ on the domestic sports and racing side, and a long tail of Malta-licensed offshore casinos taking deposits from New Zealanders without any regulatory relationship with Wellington. The Bill collapses that arrangement. From the operator side, this is the first time the New Zealand market becomes a *regulated* opportunity rather than a tolerated grey one. From the DIA's side, it is the first time the regulator gets to choose which 15 operators are permitted to market to NZ residents — and which compliance histories are acceptable for that permission.

That choice is where the editorial lives.

The Marquee-Name Reflex

The first pattern is the easiest one to describe and the hardest one to argue with: when a new market opens, the trade press defaults to naming the biggest brands as the favourites. Bet365 reports FY2024 revenue of £3,388m and serves an estimated 90 million registered customers across roughly 170 countries — those figures are in the public filings at Companies House. 888, now trading as evoke plc on the LSE under ticker DJAN, posted £1,736m for FY2024 across 14 brands. These are not small operators. The reflex to name them as auction favourites is not unreasonable on revenue grounds alone.

What that reflex skips is the question the DIA will actually ask, which is not "how big are you" but "what does your enforcement history look like and what does your responsible gambling stack actually do." On that question, the marquee names look considerably more mixed than the revenue line suggests. The DIA published its compliance framework at dia.govt.nz/Gambling-Compliance and it is, in tone, closer to the UKGC's language on social responsibility than to the more permissive Maltese model many of these operators have been operating under for the NZ-facing portion of their business.

Read that compliance page once and the auction starts to look less like a revenue contest and more like an audit of who can credibly demonstrate, on paper, that they treat the social-cost side of the business as something more than a marketing line.

The Enforcement-Register Gap

The second pattern is the one nobody in a launch press release ever volunteers: every operator currently being floated as a candidate has been fined by the UKGC. Bet365 paid £582,120 in December 2022 — the enforcement notice is on the UKGC's news register. 888 paid £9.4m in March 2022 — also on the public record, and the scope of that one is worth quoting from the notice itself: social responsibility failures including seven customer accounts with unusual deposit patterns that were not properly investigated, plus AML controls that the regulator deemed insufficient for high-deposit customers.

Those two enforcement actions are not equivalent. The Bet365 penalty was, in regulatory-scale terms, a small one — a procedural finding rather than a systemic indictment. The 888 penalty is a different category of document. £9.4m is a number the UKGC reaches when the controls failure is wide rather than narrow, when multiple customers were affected, and when the AML side is implicated. A regulator looking at 888's UKGC file is not looking at a single bad quarter. They are looking at a multi-control failure that triggered the kind of fine the UKGC reserves for what it considers a systemic gap.

If the DIA writes its first-tier licensing criteria the way the UKGC writes its enforcement notices, the 2022 fines on the public register are not background noise — they are the test.

Here is where the cross-reference matters. The 888 UKGC enforcement notice and evoke plc's own investor disclosures are both operative documents. The investor materials describe the £2.2bn William Hill acquisition completed in 2022, which is the strategic event that defines what evoke plc is today. The UKGC notice describes a controls failure that pre-dates that acquisition by months and was published while the acquisition financing was still being placed. Both documents are on the public record. They describe the same company at the same moment in different registers — one to investors, one to a regulator. A DIA reviewer looking at 888's licence application in 2026 will have access to both. How those two documents are reconciled in the application is the question that decides whether the marquee revenue figure carries any weight at all.

The Certification Substitute

The third pattern is the one that gets the least scrutiny because it sounds the most reassuring. Both operators in this analysis hold certifications from credible test houses. Bet365 holds an iTech Labs RNG certification dated December 2024, plus a Gaming Laboratories International RTP certification from November 2024. 888 holds an iTech Labs RNG cert from October 2024 and an eCOGRA game fairness certification from July 2024 — eCOGRA also runs the dispute mediation programme that processes around 1,200 player cases annually with an average resolution time of 14 days, which is genuinely meaningful infrastructure for a regulator to inherit.

The substitute pattern is this: certifications get cited in licence applications as if they are a proxy for compliance health. They are not. An iTech Labs RNG certification confirms that a specific game's random number generator behaves as advertised at the date of testing. The iTech Labs audit cadence — quarterly per deployed game, annual re-certification for the RNG seed, 48-hour incident re-audit when a dispute is raised — is a real schedule, and it tells you something narrow and important about game integrity. It tells you nothing about whether the operator investigated seven accounts with unusual deposit patterns. The certification scope is the story, and the scope is narrower than the marketing surface around it implies.

For the DIA, the relevant question is whether the licensing framework that emerges in 2026 weights certification evidence and enforcement-register evidence the same way, or whether — as the UKGC and MGA both effectively do — it treats certification as a baseline gate and enforcement history as the actual differentiator. The published compliance framework leans toward the second model. Operators preparing applications who treat their certification stack as the main answer are answering the wrong question.

So What Do You Actually Do

If you are a New Zealand player reading this in the pre-licensing window, the practical move is to recognise that the current offshore Malta-licensed operators serving the NZ market are not the same thing the 2026 licensees will be, even if some of the corporate names overlap. The licensing regime changes the regulatory relationship — Wellington gets a seat at the table that Valletta currently occupies alone. The deposit you make to a Malta-licensed casino today is governed by MGA rules, the segregated-fund language those rules contain, and the dispute mediation pathway that runs through eCOGRA. The deposit you make to a DIA-licensed operator from late 2026 onward will be governed by something New Zealand writes, and the something-New-Zealand-writes will look, on current signals, more like the UKGC model than the MGA one.

If you are watching the licensing race for commercial reasons — affiliate, supplier, journalist — the lazy framing is to track which operators leak interest first. The better framing is to read the DIA compliance page in full, read each candidate operator's last three years of UKGC and MGA enforcement entries in full, and notice which operators have a clean register and which have a £9.4m line item from 2022 that has not been retired by anything subsequent. The Bet365 ownership structure — privately held, Coates family majority, Denise Coates serving as joint CEO and reporting £221m in pay for 2024 — also matters here in a way it does not for the LSE-listed evoke plc, because the disclosure regime that binds a private company is different from the one that binds a listed one, and the DIA will know that when it reads the applications.

The unsettled question, and the one nobody in the public commentary has answered yet, is whether the DIA will publish the licensing scoring rubric in advance of the 2026 auction or only the criteria. The UKGC publishes criteria but not weightings. The MGA publishes neither in the depth a serious applicant would want. If New Zealand chooses transparency on the rubric — if Wellington tells the applicants exactly which weight the enforcement register carries versus the certification stack versus the responsible gambling tools count — the auction becomes a different process than the one the trade press is currently describing. Whether the DIA does that, and whether the 15 licences end up going to the names everyone expects or to a quieter set of operators whose UKGC register reads cleaner than their revenue line suggests, is the question we will be watching. If you know the answer before the rest of us, write.

FAQ

When will New Zealand's first online casino licences actually be issued?

The Online Casino Gambling Bill is the legislative vehicle and the auction for 15 licences is scheduled for 2026. The DIA is the regulator named in the framework, with compliance criteria published at dia.govt.nz/Gambling-Compliance. Until licences are issued, the only domestically licensed online operator remains TAB NZ for sports and racing — there is no current legal pathway for an online casino licence in New Zealand, and the 15-licence number itself is what makes the 2026 process competitive rather than open.

Under the Gambling Act 2003, overseas operators cannot market to New Zealand residents, but residents themselves are not prohibited from placing bets offshore. That asymmetry is what created the current grey-market layer of Malta-licensed casinos serving NZ players without a regulatory relationship with the DIA. The 2026 licensing regime is designed to close that gap by giving Wellington direct supervision over 15 operators that will be permitted to market domestically.

Why does the UKGC enforcement history matter for a New Zealand licence application?

The DIA's published compliance framework reads, in tone and emphasis, closer to the UKGC's social-responsibility model than to the more permissive Maltese approach many offshore operators have been using for the NZ-facing portion of their business. When a regulator writes its compliance language that way, the first thing it does with an applicant is read the applicant's UKGC and MGA enforcement registers. The 2022 fines against Bet365 (£582,120) and 888 (£9.4m) are on the public record and will be visible to DIA reviewers.

What's the difference between Bet365's £582,120 fine and 888's £9.4m fine?

The numbers are not equivalent in regulatory weight. The Bet365 settlement was a procedural finding — small in UKGC enforcement-scale terms. The 888 penalty is a different category of document: £9.4m is the kind of figure the UKGC reaches when controls failures are systemic rather than isolated, when multiple customer accounts were affected, and when AML controls are implicated. The published scope of the 888 notice cites seven accounts with unusual deposit patterns that were not properly investigated.

Does an iTech Labs or eCOGRA certification mean an operator is compliant overall?

No. A certification from iTech Labs or eCOGRA confirms something narrow and specific — typically that a particular game's RNG behaves as advertised at the date of testing, or that a dispute mediation programme meets defined standards. The scope does not extend to AML controls, customer affordability checks, or the social-responsibility supervision that triggers most regulatory fines. Treating certification as a proxy for full compliance is the substitution pattern this article describes.

Is TAB NZ going to lose its monopoly when the 15 licences are issued?

TAB NZ's monopoly is on domestic online sports and racing betting, secured through Entain's 2023 tender win on a 23-year operating licence with a minimum NZ$1.0bn commitment to the NZ Racing Board over the first five years. The 2026 licences are for online casino gaming, which is a different product vertical. So the answer is technically no — TAB NZ retains the sports and racing space — but the broader online gambling market does open up to direct competition for the first time.

What payment methods will the licensed operators likely support for NZ players?

Current offshore operators serving New Zealand commonly support POLi, Paysafecard, Skrill, Neteller, Visa and Mastercard, and online banking. The licensed regime will almost certainly inherit this rail set because it matches what New Zealand players already use, though the DIA's framework may add specific source-of-funds verification requirements that change how some of those rails operate in practice. The cards-and-online-banking combination is the safest bet for what will be supported on day one.