Q&A

What is the main point for operators entering Alberta’s iGaming market?

Getting approved is only the beginning. Operators will need to build, document, and maintain compliance across multiple legal, regulatory, privacy, AML, marketing, responsible gambling, and technical requirements.

Is Alberta iGaming registration a single step?

No. Entry involves regulatory registration with Alberta Gaming, Liquor and Cannabis, followed by a commercial operating agreement with the Alberta iGaming Corporation.

Why is the player registration flow so important?

The player registration flow is where many obligations converge, including identity verification, location controls, privacy notices, responsible gambling prompts, consent, payments, and recordkeeping.

Can operators rely on one legal document to understand their obligations?

No. The applicable requirements are spread across several statutes, regulations, standards, policies, directives, and operating documents.

What is the biggest compliance risk for operators?

A common risk is treating compliance as a policy exercise instead of translating requirements into product design, workflows, controls, logs, and operational procedures.

More Than Registration

A common assumption is that the hard part is getting approved. In Alberta, that is only part of the work.

At a high-level, entry into the market involves two main steps: regulatory registration with Alberta Gaming, Liquor and Cannabis (“AGLC”) in the appropriate category (iGaming Operator, Goods or Services Supplier, Goods or Services Supplier – Other) followed by a commercial operating agreement with the Alberta iGaming Corporation (“AiGC”). Those steps matter, but the obligations that follow matter just as much.

Operators and suppliers will need to manage requirements that span a wide domain of regulatory materials (laws, regulations, directives, standards, policies, and contractual terms) and cover diverse topics such as privacy, data handling, anti money laundering, client verification, responsible gambling, advertising, game integrity, technical, and product design considerations. Once relevant obligations have been identified and considered, they need to be translated into front-end and back-end design choices for the iGaming site, including in respect of player registration flow, payment stack, account controls, marketing systems, data practices, and player-facing experience.

That is where the real work begins.

The regulatory materials you may need to rely on

No single document captures everything. Depending on its structure and product, an operator or supplier may need to read, reconcile, and build against materials such as the following (a non-exhaustive list, and not every item applies to every operator/supplier):

Provincial gaming framework

  • The iGaming Alberta Act (Bill 48)
  • The Gaming, Liquor and Cannabis Act
  • The Gaming, Liquor and Cannabis Regulation (as amended)
  • The conduct-and-manage gaming provisions of the Criminal Code (Canada)
  • The AiGC operating agreement that each operator signs
  • AGLC's Standards and Requirements for Internet Gaming

Privacy and access to information

  • The Protection of Privacy Act (“POPA”)
  • The Protection of Privacy Regulation and the Protection of Privacy (Ministerial) Regulation
  • The Access to Information Act (“ATIA”) and the Access to Information Regulation
  • The Designation of Public Bodies Regulation
  • The Personal Information Protection Act (“PIPA”) – Alberta's private-sector privacy law
  • The Personal Information Protection and Electronic Documents Act (“PIPEDA”) – federal, where inter-provincial or cross-border data flows are engaged
  • The POPA Guide and related Government of Alberta and Information and Privacy Commissioner fact sheets and guidance
  • Privacy-related AiGC policy documents and related requirements

Anti-money-laundering and financial crime

  • The Proceeds of Crime (Money Laundering) and Terrorist Financing Act (“PCMLTFA”) and its regulations
  • FINTRAC guidance
  • AML/ATF-related policy documents and related requirements
  • Applicable sanctions-screening obligations

Advertising, marketing, and anti-spam

  • Canada's Anti-Spam Legislation (“CASL”) and the associated Canadian Radio-television and Telecommunications Commission (“CRTC”) guidance
  • The Telecommunications Act – the CRTC Unsolicited Telecommunications Rules and the National Do Not Call List
  • AGLC advertising, marketing, and inducement standards
  • The misleading-advertising provisions of the Competition Act (Canada)

Electronic transactions and signatures

  • The Electronic Transactions Act (Alberta)
  • The Government of Alberta electronic-signature standards – the Technical Standard, the Metadata Standard, the Solution Requirements, and the Types Standard

Consumer protection and corporate standing

  • Alberta consumer-protection law
  • Business-corporations and extra-provincial registration requirements for non-Alberta entities

Responsible gambling

  • AGLC's responsible-gambling standards and Alberta's centralized self-exclusion program
  • Responsible Gambling Council "RG Check" accreditation
  • GameSense program expectations

Technical, integrity, and security

  • Game and random-number-generator certification by accredited independent test labs
  • Geolocation and geo-verification expectations
  • Platform integrity, security, and data-handling expectations under AGLC standards and the operating agreement

Why the List Matters

If that list feels like a lot to hold in one place, that is the point. Alberta iGaming compliance is not one approval, one policy, or one legal review. It is a system of obligations that need to work together.

The challenge is not only understanding each instrument. It is understanding where they overlap.

A privacy requirement may affect how consent is presented. An electronic signature standard may affect how that consent is captured and logged. An AML check may affect when an account can move from pending to created. A responsible gambling requirement may affect what a player must see before registering their account or playing.

Read in isolation, these requirements can look manageable. In practice, the challenge is putting it all together into a single package.

The Registration Journey Is the Pressure Test

The player registration flow is one of the clearest places to test whether the compliance framework has been implemented properly. This makes it a useful pressure test, as it forces both sequencing and evidence. Operators typically need to map and validate with counsel items such as:

  • Age and identity verification, including where each step sits in the flow
  • Location and geo verification, including controls that limit play to eligible Alberta players
  • Responsible gambling prompts, limit setting, and self exclusion, including integration with Alberta’s centralized program
  • Collection notices, privacy statements, terms and conditions, requests for player consent, disclosures, and user facing terms, including what must be surfaced on screen versus linked and where each item should be placed in the player registration flow
  • Privacy notices, collection and use purposes, retention, and data security
  • Marketing consent management and promotional restrictions
  • Fraud, collusion, bonus abuse, and account integrity controls
  • Payment onboarding touchpoints and awareness of AML red flags
  • Recordkeeping, auditability, and change management as the flow evolves

Each item may look straightforward on its own. The harder question is sequencing. When can an account considered created? What content must be included in a request for player consent? What can be linked? What must be shown on screen? Can one consent mechanism satisfy more than one regime?

These questions are legal at the outset, but resolving them requires product and engineering teams to implement the answers in the build.

Build It Into the Product

A common pitfall is treating compliance as a binder exercise. Policies matter, but they don’t, by themselves, translate legal requirements into operational controls.

Requirements need to be built into screens, logic, workflows, logs, controls, escalation paths, and change management processes. They need to be clear enough for engineering teams to implement and robust enough to hold up under later review.

That requires legal, product, compliance, payments, marketing, and technical teams to work together before key design decisions are locked. Waiting until the end can create avoidable friction, rework, or gaps between what the policy says and what the product actually does.

How We Can Help

The Alberta framework is complex, but it is manageable with the right approach. The key is to move from a list of obligations to a coordinated compliance plan that product, legal, and operational teams can use.

Segev LLP advises operators, suppliers, affiliates, investors, and technology providers on entering and operating in regulated iGaming markets, including Alberta. For operators and suppliers already operating in Ontario, we assist with porting their operations from Ontario to Alberta. While there are meaningful points of overlap, the jurisdictions are not a 1:1 match, and processes, documentation, and technical controls often need to be adapted to Alberta’s framework. We help clients identify and navigate those differences so they can prioritize workstreams and execute changes efficiently.

For Alberta, we can assist with mapping applicable authorities, reconciling overlapping requirements, pressure testing registration and onboarding flows, and translating legal obligations into practical specifications for product and compliance teams.

Whether you are evaluating Alberta market entry, adapting an Ontario-based operating model for Alberta, or refining an existing build, we can help you turn the regulatory landscape into a workable UI and UX plan for your product design team.

If you have questions about your Alberta iGaming strategy and compliance approach, our team would love to hear from you. Feel free to reach out to Segev LLP at 1-800-604-1312 or https://segevllp.com/contact-us/.

Disclaimer

***The above blog post is provided for informational purposes only and has not been tailored to your specific circumstances. This blog post does not constitute legal advice or other professional advice and may not be relied upon as such.***