USA - Ohio: Casino Control

USA - Ohio: Casino Control

Quick Reference

Ohio is a mature, clearly segmented jurisdiction with four commercial casinos (Cincinnati, Cleveland, Columbus, Toledo), a racino with VLT under the Lottery umbrella and a full sports betting model from January 1, 2023: online (Type A), retail (Type B) and kiosks in bars/retail (Type C).

• Ohio Casino Control Commission (OCCC) - licensing/supervision of casinos and all types of sports betting (A/B/C), audit, investigations, Responsible Gaming.
• Ohio Lottery Commission (OLC) - VLT management in racino and the operating part of Type C (host locations/terminals) in conjunction with OCCC rules.

Online casinos (iGaming) are not allowed in Ohio.

Legal Framework

State statutes on the organization of commercial casinos and the creation of OCCC (licenses, control, reporting, taxation).
Sports Gaming Pack: Type A/B/C rules, geolocation, house rules, integrites, promotional deductions and age restrictions.
Regulation on Video Lottery Terminals (VLT): operation of a diet under the control of the Lottery (distribution "lottery" model).
By-laws: MICS/accounting, technical standards, suitability, RG/marketing.

Roles and organization of supervision

OCCC: licensing and suitability (beneficiaries, officers, key personnel, significant counterparties), GGR/AGR audit, disciplinary cases, approval of technical platforms/wallets/geo/CUS, maintenance of a voluntary self-exclusion program.
OLC (Lottery): VLT (central telemetry/distribution) administration, participation in Type C (approval of host locations/kiosk operators) under OCCC regulatory standards.

Tolerance perimeter and licensing

Casino (commercial)

Casino Operator (4 sites) - slots/tables/poker; mandatory MICS, video surveillance, progressive accounting, GGR reports/taxes.
Manufacturer/Supplier/Service Provider - content, RNG, accounting/surveillance systems, cashless/TITO, payments, CCM/geo.

Racino (VLT under Lottery)

Racetrack sites with VLTs in the "lottery" model: net win apportionment between state/operator/municipalities; tables - not in VLT perimeter.

Sports Gaming

Type A (Online/Mobile Proprietor) - online brand (application/web) through market-access with a local partner; "skins" are allowed.
Type B (Retail Sportsbook) - ground sportbook (usually with a casino/arena/listing facility).
Type C (Kiosks) - limited kiosks on host locations (bars/shops), administered by the Lottery in accordance with OCCC rules (limits of bets/types of markets, simple UX).
Management/Service Providers - line operators/trading, risk providers, payment gateways, geolocation, KYC, affiliates - by licensing levels.

Suitability (general principles): transparent ownership and sources of funds, management competence, absence of disqualifying factors, cyber and operational readiness.

Taxes, fees and reporting (benchmarks)

Casino (GGR): 33% staff tax on gross gaming income.
Sports rates (AGR): ~ 20% (effective rate on net revenue after allowable deductions; online and retail are considered on a common AGR-base, taking into account promo for current limits/windows).
VLT (racino): "lottery" net win allocation scheme (state/operator/local shares) rather than the classic "tax"; exact parameters shall be recorded in the rules of the Lottery/contracts.
Charges: Meaningful one-time and annual charges for proprietors (A/B), management/service providers, suppliers, and key personnel.
Reporting: monthly (sometimes weekly for sports) forms for GGR/AGR, registers of promotional deductions, reconcile with banks/processors, geolocation failure logs and KYC.

Responsible play and age thresholds

21 + for casinos and sports betting (including online).
Volunteer self-exclusion (full-time program) applies to casinos and sports; registration/play/marketing is blocked.
Marketing: prohibition of targeting minors/self-excluded, prohibition of misleading language ("risk-free," etc.), mandatory RG disclaimers and links to help.

Technical Standards and MICS

Games/RNG/systems: laboratory approval, checksums/versions, tamper-evident logs, key/signature management, Dev→Prod-control.
Sports platforms: geolocation by state borders (SDK + network signatures), device fingerprinting, KYC/AML/sanctions, trading log and line changes, house rules.
VLT: central telemetry (Lottery), routine maintenance/replacements, video surveillance and controller access control.
Cybersecurity: network segmentation, MFA/IAM, vulnerability/patch management, regular pentest/tabletop, DR/BCP plans, SBOM/supply-chain control.

Sports Betting: Operating Model (A/B/C)

Market access: online brands (Type A) work through local market holders; retail (Type B) - at approved sites. Type C is a simplified line of markets/limits on kiosks (parlays/modest limits).
House Rules: transparent limits, settlements/cancellations, change notices; public availability.
Integrity: contracts with data providers, anomaly monitoring (in-play/prematch), prohibition of insider participation.
Promos and taxes: strict accounting for free bets/boosts/insurance and their impact on AGR; limits/windows for promo write-off.
Registration/geo: device-hygiene, anti-spoofing, fault/lock logs - as part of compliance.

iGaming

Online casinos and poker are not allowed in Ohio; the online vertical is limited to sports betting.

Licensing Process: Reference Roadmap

1. 0-1 months - pre-filing: role selection (casino/operator A/B/C/vendor), ownership map, gap analysis of MICS/technical requirements OCCC/OLC, integration roadmap.
2. 1-3 months - suitability packages (beneficiaries/officers/key employees), RG/AML/MICS policies, house rules (sports), tech packages (wallet/geo/CUS/payments).
3. 3-6 months - laboratory tests/certification, integrations, pilots/field trials, reporting setup (GGR/AGR, promotional deductions), personnel training.
4. 6 + months - public decisions/conditional approvals, staged go-live (kioski/retail→online), post-audit and fine-tuning.

Operational checklists

Casino

• Full MICS coverage: cage, slots/tables, progressives, promo.
• Video surveillance/record storage; key/access control.
• Daily drop/count; timely filing by GGR/taxes.
• RG training and 21 + control, transparent marketing.
• Software/content version control, immutable logs, Dev→Prod procedures.

Racino/VLT (via Lottery)

• VLT telemetry and revenue registers, service/replacements as per regulation.
• RG materials, time/payment restrictions (where applicable).
• Reconciliation of distributions to Lottery reports and banks.

Sportsbook (Type A/B)

• Actual house rules, limits, cancellation procedure; trading journal.
• Geolocation/anti-spoofing, device fingerprinting, fault log.
• Accounting promo (free bets/boosts) and correct AGR base.
• Integrity alerts, collaboration with league data providers.
• KYC/AML: risk scoring, CTR/SAR triggers, monitoring wallet→bankovskiye rails.

Type C (kiosks)

• Compliance with the list of allowed markets/limits and UX requirements.
• Terminal maintenance, transaction logs, cash discipline.
• Training of host location personnel (21 + check, RG materials).

Frequent risks and red flags

Opaque beneficiaries/debt constructs; side-agreements affecting control.
Geo/anti-spoofing and poor device hygiene in mobile; incomplete logs and Dev→Prod - violations.
Errors in AGR (incorrect accounting of promos), delays in reporting/payments.
Non-compliance with MICS: unauthorized versions/settings, insufficient video surveillance.
Marketing to self-excluded/under 21, use of prohibited language.

Economics and P&L: accents

Casino (33% GGR): The tax is stable - optimize the mix of slots/board games, progressives and surveillance/cyber/certification transaction costs.
Sports (~ 20% AGR): sensitive to limits, trading and promotional policies; carefully consider the impact of free bets/boosts and seasonality.
VLT (racino): predictable cashouts under the "lottery" distribution model; the economy depends on racetrack traffic and VLT content.
CapEx/OpEx: geo/KUS-SDK, integrated monitoring, SIEM/logging, audit/certification - to be included in the unit economy.

Trends 2025

Strengthening cashless/wallet requirements and transaction traceability (audit-trail, AML triggers).
The growth of cyber resilience standards and supply-chain security (signatures, SBOM, reproducible assemblies).
Accurate formalization of promotional deductions and AGR reporting; more focus on advertising and RG-KPIs.
Further optimization of the Type C network and integration with retail/bar infrastructure.

What's important to remember

Ohio - omnichannel model: casino (OCCC) + VLT-racino (Lottery) + A/B/C sports (OCCC/OLC).
iGaming is not allowed; online vertical is a sport.
Success is ensured by: a transparent ownership structure, impeccable MICS/reporting, strong geo/KYC/AML contours, discipline in promo/AGR and a neat P&L model at 33% (casino) and ~ 20% (sports).