Back to Frameworks

GLI-33 - Gaming Laboratories International Event Wagering Systems

International (adopted by state and national gaming regulators)
vVersion 1.1 (revision date 14 May 2019; 2024 reprint with identical body)
5 domains
145 controls

GLI-33 Standards for Event Wagering Systems is the leading independent technical standard for certification of EVENT WAGERING SYSTEMS (sports betting / sportsbook / fantasy sports / fixed-odds wagering / pool wagering / pari-mutuel wagering) operated by regulated gaming operators in jurisdictions where such activities are legalized. Published by GAMING LABORATORIES INTERNATIONAL (GLI) - an independent ISO/IEC 17025 + ISO 9001 + A2LA accredited testing laboratory founded 1989, providing testing + certification + professional services to gaming regulators + operators + suppliers across 480+ jurisdictions globally. CURRENT EDITION: v1.1 issued December 2018; ongoing 2024-2025 update pipeline incorporating new categories (in-play wagering + micro-betting + same-game parlays + futures + cross-state mobile + fantasy + esports + AI-driven anti-fraud + cryptocurrency-funded accounts + integrity-monitoring API). SCOPE: covers all components of an Event Wagering System including (a) Event Wagering Engine + Wager Acceptance Logic; (b) Player Account Management (PAM); (c) Risk Management Engine + Odds Engine; (d) Geolocation Verification (typically third-party GLI-19 certified); (e) Identity Verification / KYC; (f) Payment Processing + Anti-Money-Laundering; (g) Mobile + Internet Wagering Security; (h) Audit + Significant Event Logging; (i) Responsible Gaming Features + Self-Exclusion; (j) Integrity Monitoring + Anti-Fraud + Collusion Detection; (k) Reporting + Regulatory Submissions; (l) Information Security; (m) Disaster Recovery + Business Continuity; (n) Change Management + Software Signature Verification; (o) Random Number Generation (if applicable - typically GLI-19 certified). PUBLICATION + LICENSE: GLI-33 is COPYRIGHTED by Gaming Laboratories International + freely downloadable from gaminglabs.com (older versions) + accessible via member portal; state-regulator incorporations make the standard structure publicly known. COORDINATION + ADOPTION: GLI-33 commonly invoked alongside GLI-19 (Standards for Random Number Generators) + GLI-21 (Standards for Client-Server Systems) + GLI-27 (Standards for Network Security) + state-specific technical standards; in regulated jurisdictions a sports-betting platform typically requires GLI-33 certification + state-regulator approval + ongoing annual audits + change-management notifications. 2024-2025 STATUS: GLI continues to update + version maintenance + new sub-sections for emerging features; US sports betting legal in 38+ states (DC + Puerto Rico) by 2026; international markets expanding including Brazil (legalized 2024) + Argentina + Mexico + Ontario Canada + Latin America + Africa.

Verified

GLI-33 - Gaming Laboratories International Event Wagering Systems is a compliance framework from International (adopted by state and national gaming regulators) with 5 domains and 145 controls that map to 99 other frameworks. The largest domains are Appendix B: Operational audit for technical security controls (system operation and security, backup and recovery, communications, third parties, technical controls, remote access and firewalls, change management, security testing) – GLI-33 - Gaming Laboratories International Event Wagering Systems (41 controls), Appendix A: Operational audit for wagering procedures and practices (internal controls, player account controls, operating procedures, wagering rules, wagering procedures, venue, monitoring) – GLI-33 - Gaming Laboratories International Event Wagering Systems (37 controls), Chapter 2: System requirements (clock, control program, wagering and player account management, wagering instruments, location, information to be maintained, reporting) – GLI-33 - Gaming Laboratories International Event Wagering Systems (32 controls). Every control below carries what it requires and what an assessor expects to see.

Maintained by Gerard BlokdykControl text last updated

Framework summaries on this platform are interpretations grounded in the published source, for educational and compliance planning purposes. They do not reproduce or replace the official standards. Refer to the authoritative source for the definitive text. Framework names and trademarks belong to their respective organisations.

Framework Domains (5)

Appendix A: Operational audit for wagering procedures and practices (internal controls, player account controls, operating procedures, wagering rules, wagering procedures, venue, monitoring) – GLI-33 - Gaming Laboratories International Event Wagering Systems

37 controls
Controls in the Appendix A: Operational audit for wagering procedures and practices (internal controls, player account controls, operating procedures, wagering rules, wagering procedures, venue, monitoring) – GLI-33 - Gaming Laboratories International Event Wagering Systems domain of GLI-33 - Gaming Laboratories International Event Wagering Systems: 37 controls
CodeTitle
gli-33-gaming-laboratories-international-event-wagering-systems::A.2.1A.2.1 Internal Control Procedures
gli-33-gaming-laboratories-international-event-wagering-systems::A.2.2A.2.2 Information Management
gli-33-gaming-laboratories-international-event-wagering-systems::A.2.3A.2.3 Risk Management
gli-33-gaming-laboratories-international-event-wagering-systems::A.2.4A.2.4 Restricted Players
gli-33-gaming-laboratories-international-event-wagering-systems::A.3.1A.3.1 Registration and Verification
gli-33-gaming-laboratories-international-event-wagering-systems::A.3.2A.3.2 Fraudulent Accounts
gli-33-gaming-laboratories-international-event-wagering-systems::A.3.3A.3.3 Terms and Conditions
gli-33-gaming-laboratories-international-event-wagering-systems::A.3.4A.3.4 Privacy Policy
gli-33-gaming-laboratories-international-event-wagering-systems::A.3.5A.3.5 Player Data Security
gli-33-gaming-laboratories-international-event-wagering-systems::A.3.6A.3.6 Financial Transactions
gli-33-gaming-laboratories-international-event-wagering-systems::A.3.7A.3.7 Limitations
gli-33-gaming-laboratories-international-event-wagering-systems::A.3.8A.3.8 Exclusions
gli-33-gaming-laboratories-international-event-wagering-systems::A.3.9A.3.9 Inactive Accounts
gli-33-gaming-laboratories-international-event-wagering-systems::A.4.1A.4.1 Operator Reserves
gli-33-gaming-laboratories-international-event-wagering-systems::A.4.2A.4.2 Protection of Player Funds
gli-33-gaming-laboratories-international-event-wagering-systems::A.4.3A.4.3 Taxation
gli-33-gaming-laboratories-international-event-wagering-systems::A.4.4A.4.4 Complaint/Dispute Process
gli-33-gaming-laboratories-international-event-wagering-systems::A.4.5A.4.5 Player Protection Information
gli-33-gaming-laboratories-international-event-wagering-systems::A.5.1A.5.1 Wagering Rules
gli-33-gaming-laboratories-international-event-wagering-systems::A.5.2A.5.2 Wagering Rules Content
gli-33-gaming-laboratories-international-event-wagering-systems::A.5.3A.5.3 Promotions and/or Bonuses
gli-33-gaming-laboratories-international-event-wagering-systems::A.5.4A.5.4 Contests/Tournaments
gli-33-gaming-laboratories-international-event-wagering-systems::A.6.1A.6.1 Odds/Payouts and Prices
gli-33-gaming-laboratories-international-event-wagering-systems::A.6.2A.6.2 Statistics/Line Data
gli-33-gaming-laboratories-international-event-wagering-systems::A.6.3A.6.3 Suspending Markets or Events
gli-33-gaming-laboratories-international-event-wagering-systems::A.6.4A.6.4 Wager Cancellations
gli-33-gaming-laboratories-international-event-wagering-systems::A.6.5A.6.5 Wagering Periods
gli-33-gaming-laboratories-international-event-wagering-systems::A.6.6A.6.6 Results
gli-33-gaming-laboratories-international-event-wagering-systems::A.6.7A.6.7 Winning Wager Payment
gli-33-gaming-laboratories-international-event-wagering-systems::A.6.8A.6.8 Virtual Events
gli-33-gaming-laboratories-international-event-wagering-systems::A.7.1A.7.1 Venue Verification Audit
gli-33-gaming-laboratories-international-event-wagering-systems::A.7.2A.7.2 Wagering Equipment
gli-33-gaming-laboratories-international-event-wagering-systems::A.7.3A.7.3 Wagering Operations
gli-33-gaming-laboratories-international-event-wagering-systems::A.7.4A.7.4 Surveillance and Recording
gli-33-gaming-laboratories-international-event-wagering-systems::A.8.1A.8.1 Monitoring for Collusion and Fraud
gli-33-gaming-laboratories-international-event-wagering-systems::A.8.2A.8.2 Anti-Money Laundering (AML) Monitoring
gli-33-gaming-laboratories-international-event-wagering-systems::A.8.3A.8.3 Location Service Provider Monitoring

Appendix B: Operational audit for technical security controls (system operation and security, backup and recovery, communications, third parties, technical controls, remote access and firewalls, change management, security testing) – GLI-33 - Gaming Laboratories International Event Wagering Systems

41 controls
Controls in the Appendix B: Operational audit for technical security controls (system operation and security, backup and recovery, communications, third parties, technical controls, remote access and firewalls, change management, security testing) – GLI-33 - Gaming Laboratories International Event Wagering Systems domain of GLI-33 - Gaming Laboratories International Event Wagering Systems: 41 controls
CodeTitle
gli-33-gaming-laboratories-international-event-wagering-systems::B.2.1B.2.1 System Procedures
gli-33-gaming-laboratories-international-event-wagering-systems::B.2.2B.2.2 Physical Location of Servers
gli-33-gaming-laboratories-international-event-wagering-systems::B.2.3B.2.3 Logical Access Control
gli-33-gaming-laboratories-international-event-wagering-systems::B.2.4B.2.4 User Authorization
gli-33-gaming-laboratories-international-event-wagering-systems::B.2.5B.2.5 Server Programming
gli-33-gaming-laboratories-international-event-wagering-systems::B.2.6B.2.6 Verification Procedures
gli-33-gaming-laboratories-international-event-wagering-systems::B.2.7B.2.7 Electronic Document Retention System
gli-33-gaming-laboratories-international-event-wagering-systems::B.2.8B.2.8 Asset Management
gli-33-gaming-laboratories-international-event-wagering-systems::B.3.1B.3.1 Data Security
gli-33-gaming-laboratories-international-event-wagering-systems::B.3.2B.3.2 Data Alteration
gli-33-gaming-laboratories-international-event-wagering-systems::B.3.3B.3.3 Backup Frequency
gli-33-gaming-laboratories-international-event-wagering-systems::B.3.4B.3.4 Storage Medium Backup
gli-33-gaming-laboratories-international-event-wagering-systems::B.3.5B.3.5 System Failure
gli-33-gaming-laboratories-international-event-wagering-systems::B.3.6B.3.6 Accounting of Master Resets
gli-33-gaming-laboratories-international-event-wagering-systems::B.3.7B.3.7 Recovery Requirements
gli-33-gaming-laboratories-international-event-wagering-systems::B.3.8B.3.8 Uninterruptible Power Supply (UPS) Support
gli-33-gaming-laboratories-international-event-wagering-systems::B.3.9B.3.9 Business Continuity and Disaster Recovery Plan
gli-33-gaming-laboratories-international-event-wagering-systems::B.4.2B.4.2 Connectivity
gli-33-gaming-laboratories-international-event-wagering-systems::B.4.3B.4.3 Communication Protocol
gli-33-gaming-laboratories-international-event-wagering-systems::B.4.4B.4.4 Communications Over Internet/Public Networks
gli-33-gaming-laboratories-international-event-wagering-systems::B.4.5B.4.5 Wireless Local Area Network (WLAN) Communications
gli-33-gaming-laboratories-international-event-wagering-systems::B.4.6B.4.6 Network Security Management
gli-33-gaming-laboratories-international-event-wagering-systems::B.5.1B.5.1 Third-Party Communications
gli-33-gaming-laboratories-international-event-wagering-systems::B.5.2B.5.2 Third-Party Services
gli-33-gaming-laboratories-international-event-wagering-systems::B.6.1B.6.1 Domain Name Service (DNS) Requirements
gli-33-gaming-laboratories-international-event-wagering-systems::B.6.2B.6.2 Cryptographic Controls
gli-33-gaming-laboratories-international-event-wagering-systems::B.6.3B.6.3 Encryption Key Management
gli-33-gaming-laboratories-international-event-wagering-systems::B.7.1B.7.1 Remote Access Security
gli-33-gaming-laboratories-international-event-wagering-systems::B.7.2B.7.2 Remote Access Procedures and Guest Accounts
gli-33-gaming-laboratories-international-event-wagering-systems::B.7.3B.7.3 Remote Access Activity Log
gli-33-gaming-laboratories-international-event-wagering-systems::B.7.4B.7.4 Firewalls
gli-33-gaming-laboratories-international-event-wagering-systems::B.7.5B.7.5 Firewall Audit Logs
gli-33-gaming-laboratories-international-event-wagering-systems::B.7.6B.7.6 Firewall Rules Review
gli-33-gaming-laboratories-international-event-wagering-systems::B.8.2B.8.2 Program Change Control Procedures
gli-33-gaming-laboratories-international-event-wagering-systems::B.8.3B.8.3 Software Development Life Cycle
gli-33-gaming-laboratories-international-event-wagering-systems::B.8.4B.8.4 Patches
gli-33-gaming-laboratories-international-event-wagering-systems::B.9.1B.9.1 Technical Security Testing
gli-33-gaming-laboratories-international-event-wagering-systems::B.9.2B.9.2 Vulnerability Assessment
gli-33-gaming-laboratories-international-event-wagering-systems::B.9.3B.9.3 Penetration Testing
gli-33-gaming-laboratories-international-event-wagering-systems::B.9.4B.9.4 Information Security Management System (ISMS) Audit
gli-33-gaming-laboratories-international-event-wagering-systems::B.9.5B.9.5 Cloud Service Audit

Chapter 2: System requirements (clock, control program, wagering and player account management, wagering instruments, location, information to be maintained, reporting) – GLI-33 - Gaming Laboratories International Event Wagering Systems

32 controls
Controls in the Chapter 2: System requirements (clock, control program, wagering and player account management, wagering instruments, location, information to be maintained, reporting) – GLI-33 - Gaming Laboratories International Event Wagering Systems domain of GLI-33 - Gaming Laboratories International Event Wagering Systems: 32 controls
CodeTitle
gli-33-gaming-laboratories-international-event-wagering-systems::2.1.12.1.1 General Statement
gli-33-gaming-laboratories-international-event-wagering-systems::2.2.12.2.1 System Clock
gli-33-gaming-laboratories-international-event-wagering-systems::2.2.22.2.2 Time Synchronization
gli-33-gaming-laboratories-international-event-wagering-systems::2.3.22.3.2 Control Program Self-Verification
gli-33-gaming-laboratories-international-event-wagering-systems::2.3.32.3.3 Control Program Independent Verification
gli-33-gaming-laboratories-international-event-wagering-systems::2.3.42.3.4 Shutdown and Recovery
gli-33-gaming-laboratories-international-event-wagering-systems::2.4.12.4.1 Wagering Management
gli-33-gaming-laboratories-international-event-wagering-systems::2.5.22.5.2 Registration and Verification
gli-33-gaming-laboratories-international-event-wagering-systems::2.5.32.5.3 Player Access
gli-33-gaming-laboratories-international-event-wagering-systems::2.5.42.5.4 Player Inactivity
gli-33-gaming-laboratories-international-event-wagering-systems::2.5.52.5.5 Limitations and Exclusions
gli-33-gaming-laboratories-international-event-wagering-systems::2.5.62.5.6 Player Funds Maintenance
gli-33-gaming-laboratories-international-event-wagering-systems::2.5.72.5.7 Transaction Log or Account Statement
gli-33-gaming-laboratories-international-event-wagering-systems::2.5.82.5.8 Player Loyalty Programs
gli-33-gaming-laboratories-international-event-wagering-systems::2.6.12.6.1 General Statement
gli-33-gaming-laboratories-international-event-wagering-systems::2.7.22.7.2 Location Fraud Prevention
gli-33-gaming-laboratories-international-event-wagering-systems::2.7.32.7.3 Location Detection for Remote Wagering on a WLAN
gli-33-gaming-laboratories-international-event-wagering-systems::2.7.42.7.4 Location Detection for Remote Wagering Over the Internet
gli-33-gaming-laboratories-international-event-wagering-systems::2.8.12.8.1 Data Retention and Time Stamping
gli-33-gaming-laboratories-international-event-wagering-systems::2.8.22.8.2 Wager Record Information
gli-33-gaming-laboratories-international-event-wagering-systems::2.8.32.8.3 Market Information
gli-33-gaming-laboratories-international-event-wagering-systems::2.8.42.8.4 Contest/Tournament Information
gli-33-gaming-laboratories-international-event-wagering-systems::2.8.52.8.5 Player Account Information
gli-33-gaming-laboratories-international-event-wagering-systems::2.8.62.8.6 Promotion/Bonus Information
gli-33-gaming-laboratories-international-event-wagering-systems::2.8.72.8.7 Wagering Device Information
gli-33-gaming-laboratories-international-event-wagering-systems::2.8.82.8.8 Significant Event Information
gli-33-gaming-laboratories-international-event-wagering-systems::2.8.92.8.9 User Access Information
gli-33-gaming-laboratories-international-event-wagering-systems::2.9.12.9.1 General Reporting Requirements
gli-33-gaming-laboratories-international-event-wagering-systems::2.9.22.9.2 Operator Revenue Reports
gli-33-gaming-laboratories-international-event-wagering-systems::2.9.32.9.3 Operator Liability Reports
gli-33-gaming-laboratories-international-event-wagering-systems::2.9.42.9.4 Future Events Reports
gli-33-gaming-laboratories-international-event-wagering-systems::2.9.52.9.5 Significant Events and Alterations Reports

Chapter 3: Wagering device requirements (wagering software, self-service, POS and remote wagering devices) – GLI-33 - Gaming Laboratories International Event Wagering Systems

16 controls
Controls in the Chapter 3: Wagering device requirements (wagering software, self-service, POS and remote wagering devices) – GLI-33 - Gaming Laboratories International Event Wagering Systems domain of GLI-33 - Gaming Laboratories International Event Wagering Systems: 16 controls
CodeTitle
gli-33-gaming-laboratories-international-event-wagering-systems::3.2.23.2.2 Software Identification
gli-33-gaming-laboratories-international-event-wagering-systems::3.2.33.2.3 Software Validation
gli-33-gaming-laboratories-international-event-wagering-systems::3.2.43.2.4 User Interface Requirements
gli-33-gaming-laboratories-international-event-wagering-systems::3.2.53.2.5 Simultaneous Inputs
gli-33-gaming-laboratories-international-event-wagering-systems::3.2.63.2.6 Wager Record Printers
gli-33-gaming-laboratories-international-event-wagering-systems::3.2.73.2.7 Communications
gli-33-gaming-laboratories-international-event-wagering-systems::3.3.13.3.1 General Statement
gli-33-gaming-laboratories-international-event-wagering-systems::3.4.23.4.2 Touch Screen Displays
gli-33-gaming-laboratories-international-event-wagering-systems::3.4.33.4.3 Printing Wager Records
gli-33-gaming-laboratories-international-event-wagering-systems::3.4.43.4.4 Wireless POS Wagering Devices
gli-33-gaming-laboratories-international-event-wagering-systems::3.5.13.5.1 General Statement
gli-33-gaming-laboratories-international-event-wagering-systems::3.5.23.5.2 Client-Server Interactions
gli-33-gaming-laboratories-international-event-wagering-systems::3.5.33.5.3 Compatibility Verification
gli-33-gaming-laboratories-international-event-wagering-systems::3.5.43.5.4 Software Content
gli-33-gaming-laboratories-international-event-wagering-systems::3.5.53.5.5 Cookies
gli-33-gaming-laboratories-international-event-wagering-systems::3.5.63.5.6 Information Access

Chapter 4: Event wagering requirements (displays and information, wager placement, results and payment, virtual events, external wagering systems) – GLI-33 - Gaming Laboratories International Event Wagering Systems

19 controls
Controls in the Chapter 4: Event wagering requirements (displays and information, wager placement, results and payment, virtual events, external wagering systems) – GLI-33 - Gaming Laboratories International Event Wagering Systems domain of GLI-33 - Gaming Laboratories International Event Wagering Systems: 19 controls
CodeTitle
gli-33-gaming-laboratories-international-event-wagering-systems::4.2.14.2.1 Posting of Wagering Rules
gli-33-gaming-laboratories-international-event-wagering-systems::4.2.24.2.2 Dynamic Wagering Information
gli-33-gaming-laboratories-international-event-wagering-systems::4.2.34.2.3 Player Resources/Features
gli-33-gaming-laboratories-international-event-wagering-systems::4.3.24.3.2 Placement of a Wager
gli-33-gaming-laboratories-international-event-wagering-systems::4.3.34.3.3 Automatic Acceptance of Changes in Wagers
gli-33-gaming-laboratories-international-event-wagering-systems::4.3.44.3.4 Wager Record
gli-33-gaming-laboratories-international-event-wagering-systems::4.3.54.3.5 Wagering Period Close
gli-33-gaming-laboratories-international-event-wagering-systems::4.3.64.3.6 Free Play Mode
gli-33-gaming-laboratories-international-event-wagering-systems::4.4.14.4.1 Results Display
gli-33-gaming-laboratories-international-event-wagering-systems::4.4.24.4.2 Payment of Winnings
gli-33-gaming-laboratories-international-event-wagering-systems::4.4.34.4.3 Winning Wager Record Redemption
gli-33-gaming-laboratories-international-event-wagering-systems::4.5.24.5.2 Randomization and Virtual Events
gli-33-gaming-laboratories-international-event-wagering-systems::4.5.34.5.3 Virtual Event Selection Process
gli-33-gaming-laboratories-international-event-wagering-systems::4.5.44.5.4 Virtual Event Display
gli-33-gaming-laboratories-international-event-wagering-systems::4.5.54.5.5 Simulation of Physical Objects
gli-33-gaming-laboratories-international-event-wagering-systems::4.5.64.5.6 Physics Engine
gli-33-gaming-laboratories-international-event-wagering-systems::4.6.24.6.2 Information
gli-33-gaming-laboratories-international-event-wagering-systems::4.6.34.6.3 Wagers
gli-33-gaming-laboratories-international-event-wagering-systems::4.6.44.6.4 Results

Your Compliance Coverage

If you comply with GLI-33 - Gaming Laboratories International Event Wagering Systems, you already cover:

Maps to 99 other frameworks

157 total controls
NIST SP 800-53 Rev 5
24 source controls mapped|19 target controls covered
15%
ISO 27002:2022
23 source controls mapped|20 target controls covered
15%
UK Gambling Commission LCCP and Remote Technical Standards
15 source controls mapped|12 target controls covered
10%
Nevada Gaming Control Board Cybersecurity Requirements
13 source controls mapped|12 target controls covered
8%
OWASP DevSecOps Maturity Model (DSOMM)
4 source controls mapped|5 target controls covered
3%
Regulation on the European Health Data Space (EHDS)
3 source controls mapped|3 target controls covered
2%
FedRAMP Moderate
3 source controls mapped|3 target controls covered
2%
FedRAMP High
3 source controls mapped|3 target controls covered
2%
USMCA Chapter 19 - Digital Trade (United States-Mexico-Canada Agreement)
2 source controls mapped|2 target controls covered
1%
TEFCA - Trusted Exchange Framework and Common Agreement
2 source controls mapped|1 target controls covered
1%
SWIFT CSCF
2 source controls mapped|2 target controls covered
1%
OWASP Top 10:2025
2 source controls mapped|3 target controls covered
1%
OWASP ASVS
2 source controls mapped|2 target controls covered
1%
MITRE D3FEND
2 source controls mapped|2 target controls covered
1%
FTC GLBA Safeguards Rule (16 CFR Part 314)
2 source controls mapped|2 target controls covered
1%
Bank Secrecy Act / Anti-Money Laundering (BSA/AML)
2 source controls mapped|2 target controls covered
1%
Illinois Biometric Information Privacy Act (BIPA)
2 source controls mapped|2 target controls covered
1%
ISO/IEC 29115:2013 - Entity Authentication Assurance Framework
2 source controls mapped|4 target controls covered
1%
CISA Cross-Sector Cybersecurity Performance Goals (CPG) 2.0
2 source controls mapped|4 target controls covered
1%
DAMA-DMBOK2 - Data Management Body of Knowledge (2nd Edition)
2 source controls mapped|3 target controls covered
1%
ISO/IEC 27400:2022
2 source controls mapped|2 target controls covered
1%
Florida Digital Bill of Rights (FDBR)
2 source controls mapped|3 target controls covered
1%
AML/CTF Act 2006 (Australia)
2 source controls mapped|2 target controls covered
1%
ISO/IEC 23837:2023
2 source controls mapped|2 target controls covered
1%
Global Cross-Border Privacy Rules (Global CBPR) Forum
2 source controls mapped|2 target controls covered
1%
Switzerland New Federal Act on Data Protection (nFADP/nDSG, 2023)
2 source controls mapped|2 target controls covered
1%
Vermont Data Privacy and Online Surveillance Act
1 source controls mapped|1 target controls covered
1%
US EPA Safe Drinking Water Act (SDWA) - Cybersecurity Requirements
1 source controls mapped|1 target controls covered
1%
Russia Federal Law on Personal Data (152-FZ)
1 source controls mapped|1 target controls covered
1%
OWASP API Security Top 10 - 2023
1 source controls mapped|1 target controls covered
1%
HL7 FHIR Security Framework
1 source controls mapped|1 target controls covered
1%
US Consumer Product Safety Act (CPSC) Manufacturer and Importer Duties
1 source controls mapped|1 target controls covered
1%
BSI IT-Grundschutz
1 source controls mapped|1 target controls covered
1%
ASD Strategies to Mitigate Cyber Security Incidents
1 source controls mapped|2 target controls covered
1%
FIDO2 / WebAuthn
1 source controls mapped|1 target controls covered
1%
Armenia Law on Protection of Personal Data (2015)
1 source controls mapped|1 target controls covered
1%
Privacy Act 1988 (Australia)
1 source controls mapped|1 target controls covered
1%
Ecuador Ley Orgánica de Protección de Datos Personales (LOPDP)
1 source controls mapped|1 target controls covered
1%
Law No. 172-13 on the Protection of Personal Data
1 source controls mapped|1 target controls covered
1%
India DPDP Act
1 source controls mapped|1 target controls covered
1%
Bahrain PDPL
1 source controls mapped|1 target controls covered
1%
Aged Care Quality Standards 2019 (repealed edition)
1 source controls mapped|1 target controls covered
1%
W3C Verifiable Credentials (VC) Data Model 2.0
1 source controls mapped|1 target controls covered
1%
Vietnam Law on Cybersecurity (No. 116/2025/QH15)
1 source controls mapped|1 target controls covered
1%
UK Defence Standard 05-138 - Cyber Security for Defence Suppliers
1 source controls mapped|1 target controls covered
1%
Protective Security Policy Framework (PSPF) Release 2026
1 source controls mapped|1 target controls covered
1%
PCAOB AS 2201 - Audit of Internal Control Over Financial Reporting (ICFR)
1 source controls mapped|2 target controls covered
1%
Pakistan Personal Data Protection Bill 2023
1 source controls mapped|2 target controls covered
1%
NIST Post-Quantum Cryptography Standards (FIPS 203, 204, 205)
1 source controls mapped|1 target controls covered
1%
India Account Aggregator Framework (RBI)
1 source controls mapped|1 target controls covered
1%
ICH E6(R3) - Good Clinical Practice
1 source controls mapped|1 target controls covered
1%
ICAO Annex 17 - Aviation Security (AVSEC)
1 source controls mapped|1 target controls covered
1%
HKMA Cyber Resilience Assessment Framework (C-RAF)
1 source controls mapped|2 target controls covered
1%
IEC 62351 - Power Systems Communication Security
1 source controls mapped|1 target controls covered
1%
FFIEC IT Examination Handbook
1 source controls mapped|4 target controls covered
1%
FDA Quality Management System Regulation (QMSR)
1 source controls mapped|1 target controls covered
1%
ISO/IEC 27011:2024
1 source controls mapped|2 target controls covered
1%
PCI DSS 4.0
1 source controls mapped|1 target controls covered
1%
ISO/IEC 29100:2024
1 source controls mapped|3 target controls covered
1%
ISO/IEC 27014:2020
1 source controls mapped|2 target controls covered
1%
APRA CPS 234
1 source controls mapped|2 target controls covered
1%
FFIEC Cybersecurity Assessment Tool (CAT)
1 source controls mapped|2 target controls covered
1%
BS 65000:2014 - Guidance on Organizational Resilience
1 source controls mapped|2 target controls covered
1%
Science Based Targets Initiative (SBTi) - Net-Zero Standard
1 source controls mapped|2 target controls covered
1%
Albania Law No. 124/2024 on Personal Data Protection
1 source controls mapped|2 target controls covered
1%
DFARS 252.204-7012 - Safeguarding Covered Defense Information
1 source controls mapped|1 target controls covered
1%
API 1164
1 source controls mapped|1 target controls covered
1%
AS9100D - Aerospace Quality Management System
1 source controls mapped|1 target controls covered
1%
Barbados Data Protection Act 2019
1 source controls mapped|1 target controls covered
1%
IEC 60601-1 - Medical Electrical Equipment Safety
1 source controls mapped|4 target controls covered
1%
FedRAMP Rev 5
1 source controls mapped|2 target controls covered
1%
ISO/IEC 27557:2022 - Organisational Privacy Risk Management
1 source controls mapped|6 target controls covered
1%
UAE Virtual Asset Regulatory Authority (VARA) Regulations
1 source controls mapped|1 target controls covered
1%
Annex 11 to EU GMP - Computerised Systems
1 source controls mapped|4 target controls covered
1%
ASIS SPC.1-2009 - Organizational Resilience Standard
1 source controls mapped|1 target controls covered
1%
German Supply Chain Due Diligence Act (LkSG)
1 source controls mapped|1 target controls covered
1%
COBIT 2019
1 source controls mapped|1 target controls covered
1%
US Foreign Corrupt Practices Act (FCPA)
1 source controls mapped|1 target controls covered
1%
Austria Data Protection Act (Datenschutzgesetz, DSG, amended 2018)
1 source controls mapped|2 target controls covered
1%
ISO/IEC 30111:2019
1 source controls mapped|2 target controls covered
1%
ISO/IEC 27004:2016
1 source controls mapped|3 target controls covered
1%
Azerbaijan Law on Personal Data (2010)
1 source controls mapped|1 target controls covered
1%
FBI CJIS Security Policy
1 source controls mapped|1 target controls covered
1%
ISO/IEC 27031:2011
1 source controls mapped|1 target controls covered
1%
APRA CPS 230 Operational Risk Management
1 source controls mapped|3 target controls covered
1%
ISO/IEC 29147:2018
1 source controls mapped|2 target controls covered
1%
ISO/IEC 29134:2023
1 source controls mapped|1 target controls covered
1%
French Sapin II Law (Law No. 2016-1691)
1 source controls mapped|1 target controls covered
1%
Singapore AI Governance Framework
1 source controls mapped|1 target controls covered
1%
ISO/IEC 27050-1:2019
1 source controls mapped|1 target controls covered
1%
Connecticut Data Privacy Act (CTDPA)
1 source controls mapped|1 target controls covered
1%
ISO/IEC 27007:2020
1 source controls mapped|1 target controls covered
1%
FATF 40 Recommendations
1 source controls mapped|1 target controls covered
1%

Coverage is not the same as your position

This page shows what GLI-33 - Gaming Laboratories International Event Wagering Systems overlaps with in general. Where your organisation actually stands, against the standard you are going for and the certifications you already hold, is a different question. Same graph and the same recorded refutations, scoped to you rather than to a pair.

The Compliance Position Diagnostic, $5,000 fixed, ten business days

What is GLI-33 - Gaming Laboratories International Event Wagering Systems and who does it apply to?

GLI-33 - Gaming Laboratories International Event Wagering Systems is a compliance framework from International (adopted by state and national gaming regulators) with 5 domains and 145 controls. GLI-33 Standards for Event Wagering Systems is the leading independent technical standard for certification of EVENT WAGERING SYSTEMS (sports betting / sportsbook / fantasy sports / fixed-odds wagering / pool wagering / pari-mutuel wagering) operated by regulated gaming operators in jurisdictions where such activities are legalized. Published by GAMING LABORATORIES INTERNATIONAL (GLI) - an independent ISO/IEC 17025 + ISO 9001 + A2LA accredited testing laboratory founded 1989, providing testing + certification + professional services to gaming regulators + operators + suppliers across 480+ jurisdictions globally. CURRENT EDITION: v1.1 issued December 2018; ongoing 2024-2025 update pipeline incorporating new categories (in-play wagering + micro-betting + same-game parlays + futures + cross-state mobile + fantasy + esports + AI-driven anti-fraud + cryptocurrency-funded accounts + integrity-monitoring API). SCOPE: covers all components of an Event Wagering System including (a) Event Wagering Engine + Wager Acceptance Logic; (b) Player Account Management (PAM); (c) Risk Management Engine + Odds Engine; (d) Geolocation Verification (typically third-party GLI-19 certified); (e) Identity Verification / KYC; (f) Payment Processing + Anti-Money-Laundering; (g) Mobile + Internet Wagering Security; (h) Audit + Significant Event Logging; (i) Responsible Gaming Features + Self-Exclusion; (j) Integrity Monitoring + Anti-Fraud + Collusion Detection; (k) Reporting + Regulatory Submissions; (l) Information Security; (m) Disaster Recovery + Business Continuity; (n) Change Management + Software Signature Verification; (o) Random Number Generation (if applicable - typically GLI-19 certified). PUBLICATION + LICENSE: GLI-33 is COPYRIGHTED by Gaming Laboratories International + freely downloadable from gaminglabs.com (older versions) + accessible via member portal; state-regulator incorporations make the standard structure publicly known. COORDINATION + ADOPTION: GLI-33 commonly invoked alongside GLI-19 (Standards for Random Number Generators) + GLI-21 (Standards for Client-Server Systems) + GLI-27 (Standards for Network Security) + state-specific technical standards; in regulated jurisdictions a sports-betting platform typically requires GLI-33 certification + state-regulator approval + ongoing annual audits + change-management notifications. 2024-2025 STATUS: GLI continues to update + version maintenance + new sub-sections for emerging features; US sports betting legal in 38+ states (DC + Puerto Rico) by 2026; international markets expanding including Brazil (legalized 2024) + Argentina + Mexico + Ontario Canada + Latin America + Africa. It is used by organisations to establish and maintain compliance with industry standards and regulatory requirements.

What does GLI-33 - Gaming Laboratories International Event Wagering Systems actually require?

GLI-33 - Gaming Laboratories International Event Wagering Systems has 145 controls organised across 5 domains. The largest domains are Appendix B: Operational audit for technical security controls (system operation and security, backup and recovery, communications, third parties, technical controls, remote access and firewalls, change management, security testing) – GLI-33 - Gaming Laboratories International Event Wagering Systems (41 controls), Appendix A: Operational audit for wagering procedures and practices (internal controls, player account controls, operating procedures, wagering rules, wagering procedures, venue, monitoring) – GLI-33 - Gaming Laboratories International Event Wagering Systems (37 controls), Chapter 2: System requirements (clock, control program, wagering and player account management, wagering instruments, location, information to be maintained, reporting) – GLI-33 - Gaming Laboratories International Event Wagering Systems (32 controls). Each control defines specific requirements that organisations must implement to achieve compliance.

If I already comply with another framework, how much of GLI-33 - Gaming Laboratories International Event Wagering Systems do I already cover?

GLI-33 - Gaming Laboratories International Event Wagering Systems maps to 99 other compliance frameworks. The top mapping partners are NIST SP 800-53 Rev 5 (15% coverage), ISO 27002:2022 (15% coverage), UK Gambling Commission LCCP and Remote Technical Standards (10% coverage). Use our comparison tool to explore control-level mappings between frameworks.

How do I implement GLI-33 - Gaming Laboratories International Event Wagering Systems?

Start your GLI-33 - Gaming Laboratories International Event Wagering Systems compliance journey by running a self-assessment on our platform to identify your current compliance posture. Our AI advisory can answer specific questions about GLI-33 - Gaming Laboratories International Event Wagering Systems requirements, and cross-framework mapping helps you leverage existing controls from other frameworks you may already comply with. Create a free account to access all 145 controls and track your progress.

Start Your Compliance Journey

Create a free account to run self-assessments, get AI advisory, and track your compliance progress across 1,121 frameworks.

Get Started Free →

Free forever, no credit card required