GLI-33 - Gaming Laboratories International Event Wagering Systems
GLI-33: Event Wagering System Architecture, Wager Engine, Transaction Integrity

GLI-33 - Gaming Laboratories International Event Wagering Systems GLI33-EventWagering-System-Architecture: GLI-33 Event Wagering System Architecture, Wager Engine, Odds Engine and Risk Management

GLI-33 Event Wagering System architecture + wager engine + odds + risk. SYSTEM ARCHITECTURE: components include (a) presentation tier (web + mobile apps + retail kiosks + sportsbook lounge terminals); (b) wager acceptance + engine tier (wager validation + odds lookup + limit checks + risk-engine routing); (c) settlement + ledger tier (post-event settlement + account credit + audit); (d) reporting + integrity-monitoring tier; (e) data feeds from sports data providers (typically Sportradar + Genius Sports + IMG Arena + Stats Perform + others); (f) PAM (Player Account Management) integration; (g) payment processor + AML integration; (h) geolocation provider integration; (i) regulatory reporting endpoint. WAGER ENGINE: wager types (single + parlay + teaser + futures + props + live/in-play + same-game parlay + round-robin + box + half-time + period + multi-state); wager validation includes player eligibility + jurisdictional eligibility + market open + odds-current + balance-sufficient + limits-not-exceeded + responsible-gaming-limits-not-exceeded + integrity-monitoring-passes. ODDS ENGINE + RISK MANAGEMENT: odds typically supplied by central risk-management + can be auto-adjusted based on bet flow + liability exposure + suspicious-activity detection + integrity alerts; odds-changes during wager submission must be transparent + handled per regulator-approved 'best-odds-guarantee' or 'price-change-rejected' policies. TRANSACTION INTEGRITY: every wager must produce immutable transaction record + sequence-numbered + signed (HMAC or similar) + correlated with player session + geolocation + device-fingerprint; wager modification + cancellation policies must be regulator-approved + transparently logged; settled-wager records retained per state regulator (typically 5 years).

What else in your programme already covers this

This control maps to 161 controls across 83 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

ISO/IEC 27557:2022 - Organisational Privacy Risk Management · 7 controls

NIST SP 800-171A Rev 3 - Assessing CUI Security Requirements · 5 controls

Annex 11 to EU GMP - Computerised Systems · 4 controls

FFIEC IT Examination Handbook · 4 controls

  • FFIEC-03 Risk appetite and tolerance for IT risk
  • FFIEC-05 Roles and responsibilities definition
  • FFIEC-18 Ongoing monitoring and assessment
  • FFIEC-20 Exit strategy and transition planning

IEC 60601-1 - Medical Electrical Equipment Safety · 4 controls

ISO/IEC 38500:2024 - Governance of IT · 4 controls

APRA CPS 230 Operational Risk Management · 3 controls

  • CPS230-16 Internal Audit Review of the Business Continuity Plan
  • CPS230-37 Service Provider Management Policy
  • CPS230-46 Ongoing Risk Management of Each Material Arrangement

BRCGS Global Standard for Food Safety Issue 9 · 3 controls

  • 1.2 Operating System Privileged Account Control
  • 1.3 Virtualisation Platform Protection
  • 3.3 Configure Data Access Control Lists

ISO/IEC 23837 - Security Requirements for Quantum Key Distribution · 3 controls

ISO/IEC 27004:2016 · 3 controls

ISO/IEC 27011:2024 · 3 controls

ISO/IEC 27014:2020 · 3 controls

ISO/IEC 27400:2022 · 3 controls

ISO/IEC 29100:2024 · 3 controls

ISO/IEC 29134:2023 · 3 controls

ISO/IEC 29147:2018 · 3 controls

ISO/IEC 30111:2019 · 3 controls

Illinois Biometric Information Privacy Act (BIPA) · 3 controls

21 CFR Part 58 - Good Laboratory Practice (GLP) · 2 controls

APRA CPS 234 · 2 controls

  • CPS234-16 Assessment of Related Party and Third Party Capability
  • CPS234-20 Information Asset Classification

Albania Law on Protection of Personal Data (Law No. 9887, 2008, amended 2014) · 2 controls

Austria Data Protection Act (Datenschutzgesetz, DSG, amended 2018) · 2 controls

  • AT-DSG-2 Section 2 - Scope and application
  • AT-DSG-8 Section 22 - Functions and powers of the DPA

BS 65000:2014 - Guidance on Organizational Resilience · 2 controls

DAMA-DMBOK2 - Data Management Body of Knowledge (2nd Edition) · 2 controls

  • DA-1 Enterprise Data Architecture
  • DIQ-2 Data Quality Management

FFIEC Cybersecurity Assessment Tool (CAT) · 2 controls

Florida Digital Bill of Rights (FDBR) · 2 controls

  • FDBR-702 Definitions (§501.702)
  • FDBR-Scope-Defs Scope, Applicability Thresholds and Definitions (Fla. Stat. 501.701, 501.702, 501.703, 501.704)

HKMA Cyber Resilience Assessment Framework (C-RAF) · 2 controls

ISO 15189:2022 - Medical Laboratories Requirements for Quality and Competence · 2 controls

  • 6.5 Preparing and Distributing Audit Report
  • 6.7 Conducting Audit Follow-up

ISO 19011 · 2 controls

  • 6.5 Preparing and Distributing Audit Report
  • 6.7 Conducting Audit Follow-up

NIST Special Publication 800-34 Revision 1, Contingency Planning Guide for Federal Information Systems · 2 controls

  • NISTSP34-1 Contingency Planning Policy, Programme, and Plan Coordination
  • NISTSP34-2 Business Impact Analysis (BIA): Critical Resources, Recovery Priorities

OWASP DevSecOps Maturity Model (DSOMM) · 2 controls

  • DSOMM-1 Culture, Organization, Education, and Governance
  • DSOMM-2 Implementation Practices, Secure Coding, and Threat Modelling

PCAOB AS 2201 - Audit of Internal Control Over Financial Reporting (ICFR) · 2 controls

  • ASTWO-7 Deficiency Evaluation, Material Weakness, and Communication
  • ASTWO-8 ICFR Opinion, Basis, Definition, Limitations, Combined vs Separate Reports

Pakistan Personal Data Protection Bill 2023 · 2 controls

  • PAKPDPB-7 NCPDP, Registration, Records, Processor Contracts, DPO
  • PAKPDPB-8 Enforcement, Penalties, Complaints, Retention, Training

Science Based Targets Initiative (SBTi) - Net-Zero Standard · 2 controls

  • C1 Organizational Boundary
  • C3 Scope 1 and 2 Coverage

21 CFR Part 211 - Current Good Manufacturing Practice · 1 control

AML/CTF Act 2006 (Australia) · 1 control

API 1164 · 1 control

  • API1164-21 TSA Pipeline Security Directive Alignment

AS9100D - Aerospace Quality Management System · 1 control

ASIS SPC.1-2009 - Organizational Resilience Standard · 1 control

  • 4.4.1 Resources, Roles, Responsibility, and Authority

AWWA Cybersecurity Guidance for the Water Sector (American Water Works Association) · 1 control

Aged Care Quality Standards 2019 (repealed edition) · 1 control

Azerbaijan Law on Personal Data (2010) · 1 control

Barbados Data Protection Act 2019 · 1 control

CISA Cross-Sector Cybersecurity Performance Goals (CPG) 2.0 · 1 control

  • CPG-6.B Supply Chain Incident Reporting

COBIT 2019 · 1 control

FBI CJIS Security Policy · 1 control

  • CJIS-19 Supply Chain Risk Management

FDA Quality Management System Regulation (QMSR) · 1 control

  • QMSR-ISO13485-Sec5 Management responsibility (ISO 13485:2016 Section 5 - incorporated via §820.10)

FTC GLBA Safeguards Rule (16 CFR Part 314) · 1 control

FedRAMP High · 1 control

  • CA-9 Internal System Connections

FedRAMP Moderate · 1 control

  • CA-9 Internal System Connections

French Sapin II Law (Law No. 2016-1691) · 1 control

German Supply Chain Due Diligence Act (LkSG) · 1 control

Global Cross-Border Privacy Rules (Global CBPR) Forum · 1 control

  • CBPR-9-APEC-Privacy-Principles Global CBPR Forum: 9 APEC Privacy Principles (Notice + Collection + Uses + Choice + Integrity + Security + Access + Accountability + Preventing Harm)

ICAO Annex 17 - Aviation Security (AVSEC) · 1 control

ICH E6(R3) - Good Clinical Practice · 1 control

IEC 62351 - Power Systems Communication Security · 1 control

ISO 31000:2018 · 1 control

  • 6.7 Conducting Audit Follow-up

ISO/IEC 27007:2020 · 1 control

ISO/IEC 27031:2011 · 1 control

ISO/IEC 27050 - Electronic Discovery (Parts 1-4) · 1 control

ISO/IEC 29115:2023 - Entity Authentication Assurance Framework · 1 control

India Account Aggregator Framework (RBI) · 1 control

Italy Personal Data Protection Code (Legislative Decree No. 196/2003, amended 2018) · 1 control

MITRE D3FEND · 1 control

NIST Post-Quantum Cryptography Standards (FIPS 203, 204, 205) · 1 control

  • PQC-4 FIPS 205 SLH-DSA Implementation - Stateless Hash-Based Digital Signature

NIST SP 800-53 Rev 5 LOW · 1 control

  • CA-9 Internal System Connections

NIST SP 800-53 Rev 5 MODERATE · 1 control

  • CA-9 Internal System Connections

NIST SP 800-53 Revision 5.1 HIGH · 1 control

  • CA-9 Internal System Connections

OWASP ASVS · 1 control

  • OWASPASVS-1 Architecture, Design and Threat Modelling (V1)

OWASP Top 10:2025 · 1 control

PCI DSS 4.0 · 1 control

  • 2.2.2 Vendor default accounts are managed as follows: • If the vendor default account(s) will be used, the default password is changed per Requirement 8.3.6. • If the vendor default account(s) will not be used,

Protective Security Policy Framework (PSPF) Release 2024 · 1 control

  • PSPF24-1 Security Culture, Governance, Risk Management

Regulation on the European Health Data Space (EHDS) · 1 control

  • EHDSREG-1 Mandatory Requirements for EHR Systems (Articles 14-29)

SWIFT CSCF · 1 control

  • SWIFTCSCF-1 Restrict Internet Access and Protect Critical Systems (Objective 1)

Singapore AI Governance Framework · 1 control

  • AIGF-1.1 Risk Management and Internal Controls

Switzerland New Federal Act on Data Protection (nFADP/nDSG, 2023) · 1 control

  • FADP-5 Definitions (Article 5)

TEFCA - Trusted Exchange Framework and Common Agreement · 1 control

  • TEFCAREC-1 Common Agreement Conformance and Onboarding

UAE Virtual Asset Regulatory Authority (VARA) Regulations · 1 control

  • CRM-3 Risk Management Framework

UK Defence Standard 05-138 - Cyber Security for Defence Suppliers · 1 control

US Foreign Corrupt Practices Act (FCPA) · 1 control

USMCA Chapter 19 - Digital Trade (United States-Mexico-Canada Agreement) · 1 control

Vietnam Law on Cybersecurity (No. 24/2018/QH14) · 1 control

  • VIETNAMCYBER-2 Prohibited Acts (Access, Interception, Forgery, Content)

W3C Verifiable Credentials (VC) Data Model 2.0 · 1 control

  • W3CVCDM-1 Three-Party Ecosystem (Issuer, Holder, Verifier)

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.

Query this from an agent

The graph holds this control, the 161 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll GLI-33 - Gaming Laboratories International Event Wagering Systems controls