USA - Connecticut: DCP
USA - Connecticut: DCP
Quick Reference
Connecticut is a compact "hybrid" jurisdiction where there are no commercial casinos and the market is built on two tribal casinos (Mashantucket Pequot - Foxwoods; Mohegan — Mohegan Sun) и участии Connecticut Lottery Corporation (CLC).
In 2021, the state legalized iGaming (online casinos) and sports betting (retail and online). Supervision and licensing is carried out by the Department of Consumer Protection (DCP): the Gaming Division approves rules, standards, issues and controls licenses/registrations, conducts investigations and audits.
Legal Framework
Public Act 21-23 and related norms: launching interactive games and sports betting; distribution of rights between tribes and CLC.
Tribal-state compacts: Regulate land-based casinos and tribal online activities.
DCP administrative rules: suitability procedures, content/platform technical standards, reporting, Responsible Gaming.
Separate sections cover fantasy contests, advertising practices, geolocation, and identification.
Roles and Organization
DCP (Gaming Division) - licensing and supervision, investigations, reporting/tax audits, game/platform techniques, RG policies and self-exclusion.
Mashantucket Pequot & Mohegan - operate land-based casinos and can provide online casinos and online sports (each with one "skin" in each vertical).
Connecticut Lottery Corporation (CLC) - Sports Betting: Retail network and one online skin through an approved operating partner (no online casino).
Historical OTB rights are integrated with the new retail sports book architecture (under separate agreements).
Tolerance perimeter and licensing
Ground segment
Tribal casinos (Class III) - slots, board games, poker; payments to the state are determined by compacts.
Retail sportsbook: Points at tribes and in the CLC network (under DCP agreements and rules).
Online
iGaming (online casinos): slots and board games for each tribe (one online brand).
Online poker: legally permissible as part of interactive games, launch depends on operational decisions/approvals (may be absent).
Online sports betting: one "skin" for each tribe + one "skin" for CLC.
Suppliers and personnel
Platform/Service Provider, Content/Studio, Payments/Wallet/Geo/KYC - DCP registration/approval, technical audit, version control.
Gaming Vendor/Key Employee - personal and corporate suitability checks.
Suitability: transparency of beneficiaries and sources of funds, management competence, absence of disqualifying factors, cyber/operational readiness.
Taxes, charges and charges (benchmarks)
Online casino (iGaming): AGR rate with time gradation (widely used design: ~ 18% at the start with an increase to ~ 20% after several years of action).
Online/retail sports rates: AGR rate of the order of ~ 13-15% at the state level (plus contractual elements/costs of networks).
Land casinos (tribes): payments to the state mainly as rhubarb-cher for slots (historically ~ 25%) according to compacts; on board - other mechanics.
Licensing and annual fees: for operators, platforms, suppliers and key personnel.
Reporting: monthly tax and operating; registers of promotional deductions (free bets/credits), reconcile with payment gateways and bank registers.
Responsible play and limitations
Age: 21 + for casino/iGaming/sports betting; 18 + - for traditional lottery products and fantasy.
Self-exclusion: full-time DCP program (available for online and terrestrial), ban on registration/play/marketing for self-excluded.
Marketing and advertising: prohibition of targeting of minors/self-excluded, requirements for transparency of bonuses and honest conditions of promo, RG-disclaimers.
AML/BSA: risk-based KYC, CTR/SAR, cash/token control, purse and payment rail monitoring, staff training.
Technical Standards and MICS
Games and RNG (iGaming): laboratory approval, checksums/versions, tamper-evident logs, key/signature management.
Platforms/wallets/geolocation/CUS: mandatory certification and integration tests; device-fingerprinting, anti-spoofing, geo-verification failure log.
MICS: cash desk/accounting, promo/computers, progressives, sportsbook processes, separation of duties, Dev→Prod access management, inventory, incident management, DR/BCP plans.
Cybersecurity: network segmentation, MFA/IAM, vulnerability/patch management, regular pentest/tabletop exercises, supply-chain security.
Sports betting (retail and online)
Architecture: two tribal operators + CLC; each has one online brand, retail at tribal sites and on the lottery network.
House Rules: lines, limits, cancellations, settlement procedure; logging of trading actions/changes in quotations.
Integrity: collaborations with data providers, anomaly monitoring, insider participation bans; mandatory notifications and escalations.
Taxes/AGR: correct accounting of freebets, odds-boosts and parleys; transparent methodology of distributions and deductions.
iGaming (online casino and poker)
Slots/desktops - separate catalog approvals; version control and immutable logs.
Poker is allowed normatively, but launch depends on operational decisions and approvals; interstate liquidity is possible only with existing agreements and permits.
RG tools: deposit/loss/time limits, timeouts, self-exclusion, visible warnings and session statistics.
AML/KYC: sources of funds, risk scoring, monitoring wallet→bankovskiye rails, anti-bonus abuse and chargeback control.
Licensing and Start-up Process (Reference Plan)
1. 0-1 months - pre-filing: map of ownership and role model (tribe/platform/content/lottery partner), gap analysis according to DCP rules and compact, roadmap of integrations.
2. 1-3 months - applications for suitability (beneficiaries/officers/key personnel), RG/AML/MICS policies, technical packages (RNG/geo/KYC/payments), approval of house rules for sports.
3. 3-6 months - laboratory tests of games/wallets/geo, pilots/field trials, reporting/tax settings (AGR, promotional deductions), staff training.
4. 6 + mo - public decisions/approvals, commercial agreements with CLC/tribes (if applicable), staged go-live (retail→online), post-audit MICS and fine-tuning.
Operational checklists
Tribal Operator/Land Casino
- Full MICS coverage: cage, slots/tables, progressives, promo.
- Video surveillance and record storage, key/access control.
- Daily drop/count, timely reports and compact payments.
- RG training and age verification (21 +), marketing without prohibited audiences.
iGaming (tribal online brand)
- Content catalog approvals, version registry, and immutable logs.
- Geolocation/anti-spoofing, device fingerprinting, fault log.
- KYC/AML: SAR/CTR triggers, risk scoring, bonus abuse/chargeback monitoring.
- AGR/taxes: correct promotional deductions, reconcile with payment reports.
- RG tools are visible and easy to use.
Sportsbook (Tribes/CLC)
- House rules, limits, cancellations, settlement procedure.
- Integration alerts, data providers, escalation procedures.
- Correct tax base (AGR) including promo.
- Geo/Registration/Devices - SDK and network signature level control.
Vendor/Platform
- RNG/purse/integration certification, key/secret management.
- Secure assemblies/signatures, tamper-evident logs, Dev→Prod-control.
- SLA/version reversibility, feedback plan, vulnerabilities/patches.
Frequent risks and red flags
Non-transparent beneficiaries/debt instruments; hidden side-agreements.
Weak geolocation and anti-spoofing; VPN/emulator crawl attempts.
MICS non-compliance: unauthorized version changes, incomplete logs.
Errors in the calculation of AGR/promotional deductions, delays in reporting/payments.
Inadequate RG visibility and contact with self-excluded/less than 21.
Economics and P&L: accents
iGaming with a bet on AGR (~18%→~20%) - marginal vertical with promo discipline and optimal catalog (mix slots/board).
Sports (~ 13-15% AGR) is sensitive to limits, trading and promotional policies; it is important to accurately count the write-offs of freebets/boosts.
Ground payouts on the compact affect the unit-economics of slots vs board; consider this in capital allocation models.
Trends 2025
Strengthen cashless/wallet requirements and transaction traceability online and on the ground.
The growth of cyber resilience standards (supply-chain, immutability logs, regular pentest/tabletop).
Possible steps towards interstate poker liquidity (subject to agreements and approvals).
Strengthening RG metrics: early signals of risk behavior, transparent mechanics of involvement and limits.
What's important to remember
Connecticut - tribal-lottery model: iGaming only among tribes; sports - at tribes and CLC.
DCP provides strict MICS/technical requirements, geolocation/KYC/AML and reporting discipline.
Success is ensured by a transparent ownership structure, impeccable operational hygiene, a correct tax/AGR model and mature RG/cyber circuits.