Legal Prize Competition Software: A CTO’s Guide to UKGC & MGA Compliance
A single poorly structured prize promotion can trigger a licence review. That’s the reality for regulated operators running competitions, giveaways, or prize draws alongside their core sportsbook and casino products. The Gambling Commission doesn’t differentiate between a careless mistake and deliberate evasion when the structure of your promotion crosses from legal competition into unlicensed lottery territory.
Prize promotions remain one of the most effective tools for player acquisition and retention. They create engagement loops outside the core wagering experience, drive cross-sell between verticals, and generate first-party data that feeds personalisation engines. The commercial upside is clear. But the compliance surface area is larger than most platform teams appreciate when they first scope the feature.
The Gambling Act 2005 and Malta Gaming Authority frameworks both draw hard lines around what constitutes a lottery versus a legitimate competition. Get it wrong, and you’re not just facing a fine. You’re looking at potential licence conditions, public regulatory action, and the downstream commercial damage that comes with either. For PE-backed operator groups running multi-brand portfolios, a compliance failure on one brand’s promotional mechanics can trigger review across the entire group’s licence conditions.
The legal framework isn’t ambiguous. It’s just frequently misapplied.
Under the Gambling Act 2005, a lottery has three elements: payment to enter, allocation of prizes, and allocation determined by chance. Remove any one of those three, and you’re outside the lottery definition. Prize competitions legally operate by eliminating either the payment element or the chance element.
Skill-based competitions remove the chance element. The Gambling Commission’s guidance requires that a “significant proportion” of entrants are prevented from winning by the application of skill or judgment. A tie-breaker question like “complete this slogan in no more than 10 words” doesn’t meet this threshold if most entries would produce a viable answer. The skill barrier must be real, not decorative. Think questions that genuinely require knowledge, judgment, or estimation (such as “how many goals were scored in the 2023 Premier League season”), where incorrect answers are common.
Free draws remove the payment element. The critical requirement: a free entry route must be available, and it must offer genuinely equal chances of winning compared to any paid route. This is where most operators get into trouble. If your competition requires a deposit, a bet, or any spend to enter, and the “free” postal or online entry route is buried in page 7 of the T&Cs in 8pt font, a regulator will treat that as a lottery. The free route must be prominent, accessible, and genuinely usable.
MGA-regulated operators face an additional layer. Malta’s Lotteries and Other Games Act intersects with the MGA framework, and promotional mechanics that target players across multiple jurisdictions can trip over national lottery regulations in countries where you hold no lottery licence. A promotion visible to players in Italy, for instance, may fall under Italian prize competition notification requirements regardless of where your MGA licence sits.
The engineering implication is direct: your competition software needs to enforce these legal structures programmatically, not rely on marketing teams to remember the rules each time they launch a promotion. Entry route parity, skill-gate validation, jurisdiction-specific display logic, and payment detection all need to be system-enforced.
Most competition management platforms were built for brand agencies running consumer promotions. They weren’t designed for regulated iGaming environments. That gap matters.
Evalato offers strong judging workflow capabilities, with multi-round evaluation, custom scoring criteria, and judge management. Its API surface is reasonable for data extraction. Where it falls short for iGaming operators: it has no native understanding of gambling regulation, no wallet integration capability, and its user identity model doesn’t map to existing player accounts. You’d need a substantial integration layer.
Award Force has similar strengths in judging and submission management. It handles high-volume entry scenarios better than some competitors. But the same structural issues apply: no KYC integration points, no jurisdiction-aware content delivery, and audit trails that satisfy corporate governance requirements but may not meet the specificity regulators expect.
Vyper takes a different approach, focusing on viral competition mechanics and social sharing. It’s built for acquisition-oriented campaigns. The compliance features are thin. For a regulated operator, Vyper would function as a front-end engagement layer at best, with all compliance logic handled by your own backend.
The honest assessment: none of these platforms are purpose-built for regulated gambling. Using any of them requires wrapping them in a compliance layer that you build and maintain. The platform handles entry management and judging UX. You handle identity, eligibility, jurisdiction enforcement, audit, and wallet integration.
For operators running one or two promotions a year, that wrapper cost might be justifiable. For operators where competitions are a core engagement mechanic running continuously across multiple brands, the integration tax becomes a recurring engineering burden that rarely gets simpler.
Results Are Designed, Not Hoped For
Clear Objectives. Tangible Outcomes.
Well engineered software is only part of the equation. True impact comes from aligning technology with commercial intent from the outset.
We define success early, measure consistently and refine continuously to ensure every product delivers meaningful and sustained value.
Risk Mitigation: Common Regulatory Pitfalls and How to Avoid Them
The failure modes are well-documented. Most of them are preventable at the engineering layer.
Inadequate free entry routes. The most common issue. The free route exists on paper but is practically inaccessible. If your free entry route requires Managing to a separate page, completing a form with more fields than the paid route, or mailing a physical letter, a regulator will question whether it offers genuinely equal chances. The engineering fix: free and paid entry routes should hit the same entry submission endpoint, with the same validation, the same confirmation flow, and the same probability of winning.
Skill gates that don’t gate. If your skill-based competition asks a question that 95% of entrants answer correctly, it’s not a skill barrier. Your platform should track answer distribution. If correct response rates exceed a threshold you define (and can defend), the question needs to be replaced. This monitoring should be automated, not reviewed quarterly by a compliance analyst.
Missing or stale T&C versions. Promotions launched with draft terms, or terms updated mid-competition without re-acceptance by existing entrants. Your T&C service should block promotion launch until terms are approved, and flag any mid-competition term changes for legal review with an option to require re-acceptance.
Cross-jurisdiction promotional leakage. A competition intended for UK players that’s visible (and enterable) by players in jurisdictions where you don’t hold a licence for that promotional mechanic. Jurisdiction enforcement must be systemic, not dependent on marketing team configuration per campaign.
Audit trail gaps. The draw happened, a winner was selected, but there’s no record of the selection methodology, the random number generation, or the eligibility verification at the point of draw. If you can’t reconstruct exactly how a winner was chosen, with cryptographic or procedural evidence of fairness, you cannot defend the promotion.
The consequences of these failures range from licence conditions and financial penalties to, in extreme cases, licence suspension. UKGC penalties for promotional failures have increased in recent enforcement cycles. The reputational cost, particularly for operators seeking acquisition or preparing for IPO, can exceed the direct financial penalty by an order of magnitude.
Architecting Your Solution: Build vs. Buy Considerations for Operators
The build vs. buy decision for competition management follows the same logic as any platform capability decision, but with a compliance dimension that shifts the calculus.
Buy (SaaS) gets you to market faster. You can run a competition within weeks using a platform like Evalato or Award Force. But you’ll spend engineering time building the compliance wrapper: KYC integration, wallet connectivity, jurisdiction enforcement, and audit trail augmentation. That wrapper isn’t a one-time cost. Every platform update, API change, or regulatory requirement shift requires maintenance. Over a three-year horizon, the total cost of ownership often exceeds initial estimates by 2-3x once you account for integration engineering and ongoing compliance maintenance.
Build (custom) is slower to first launch, typically 3-6 months for a production-ready competition service with proper compliance controls. The advantage is architectural coherence: the competition service shares your platform’s identity layer, wallet service, event bus, and audit infrastructure natively. No translation layers. No data synchronisation jobs. Regulatory changes get implemented in your codebase, on your timeline, without waiting for a vendor’s roadmap.
Hybrid approaches are common in practice. Use an off-the-shelf judging engine for the subjective evaluation workflow (where the UX is genuinely complex) but build the entry management, eligibility enforcement, and fulfillment layers in-house. This limits vendor dependency to the component where external tooling adds the most value, while keeping compliance-critical logic under your control.
Latest from our blog
Insights & Perspectives
Our insights explore the intersection of technology, commercial strategy and disciplined execution across complex digital environments.
