USA - Pennsylvania: PGCB

USA - Pennsylvania: PGCB

Quick Reference

Pennsylvania is one of the few U.S. states with a full stack of legal products: land-based casinos, mini-casinos, online casinos (iGaming), online poker, sports betting (retail and online), fantasy competitions, VGT video terminals on approved truck stops, and state-owned iLottery (separate from PGCB). The Pennsylvania Gaming Control Board (PGCB) coordinates the games.

PGCB is responsible for licensing, suitability checks, revenue and internal controls (MICS) audits, investigations, technical standards/platform approvals, and strict execution of Responsible Gaming (including separate verticals self-exclusion lists).

Legal Framework

Base Act: Pennsylvania Race Horse Development and Gaming Act (2004), with multiple amendments, including a massive 2017 package (expansion to iGaming, sports betting, VGT and Category 4 mini-casinos).
Additional PGCB regulations cover: licensing and suitability, MICS, reporting and tax procedures, standards for iGaming/sportsbooks/fantasy, geolocation and identification requirements.

PGCB Roles and Structure

Bureau of Licensing - all types of licenses/registrations, KYE/KYB ownership chains.
Bureau of Investigations & Enforcement (BIE) - investigations, due diligence, disciplinary cases (in conjunction with the Office of Enforcement Counsel).
Bureau of Casino Compliance/Gaming Operations - permanent presence at the sites, control of MICS.
Bureau of Gaming Laboratory Operations (GLO) - technical assessment of platforms, RNG/games/wallets/integrations, version control.
Office of Responsible Play - training/RG programs, maintaining self-exclusion lists (separately: casino/iGaming, sports, VGT, fantasy).

License categories and tolerances

Casino (land-based)

Category 1 (Racetrack casinos): Racetrack casinos.
Category 2 (Standalone casinos): standalone objects.
Category 3 (Resort casinos): at resorts/hotels, limits on area/positions.
Category 4 (Mini-casinos): "satellite" objects with a limited number of positions, tied to the auction mechanism.

Online and adjacent verticals

Interactive Gaming Certificates for terrestrial operators (hold'ers of certificates) + partner skins (operational "brands" based on contracts).

Online slots, online board games, online poker - three separate subsections of certification.
Sports Wagering Certificates (retail + online), multiple online skins are allowed at the same holder through affiliated partners.
Fantasy Contests Operator - separate licensing and reporting.
VGT Operator/Establishment/Terminal - for a network of video terminals on approved truck stops.
Manufacturer/Supplier/Service Provider - providers of content, PLATFORMS, payment and anti-fraud services, geolocation, KYC/AML, etc.

Suitability-principles: full disclosure of beneficiaries/capital, source of funds, absence of disqualifying factors; review of officers/directors/key personnel and significant counterparties.

Taxes and fees (key vertical benchmarks)

💡 In Pennsylvania, the tax model is intentionally differentiated and one of the "highest" in slots and sports:

Earth slots: ~ 54% GGR.
Nazem board games: ~ 16% GGR (part - local level).

iGaming:

Online slots: ~ 54% GGR.
Online table games and poker: ~ 16% GGR.
Sports betting (retail/online): ~ 36% GGR (including local shares).
Fantasy: ~ 15% GGR (on a competitive basis).
VGT: cumulative rate on GGR above market average (high fiscal burden; state/local shares and administrative fees are taken into account).

Additional: license/annual/audit fees by category; contributions to regulatory expenses; mandatory monthly/quarterly reporting.

Responsible play and age thresholds

21 + for casino, iGaming and sports betting (online and offline).
18 + for fantasy competition and iLottery.
Self-exclusion: separate lists for casino/iGaming, sports, VGT and fantasy (you can choose one or more verticals). Self-excluded cannot register/play/receive marketing.
Marketing: clear restrictions, prohibition on targeted communication to minors/self-excluded, requirements for transparency of promotional conditions, responsible messages and visible links to help.

Technical Standards and MICS

Gaming Lab (GLO) PGCB approves versions of games, RNG, progressives, server and wallet components, integration of CUS/geolocation/payments, monitoring systems.
MICS (Minimum Internal Control Standards): cash desk/accounting, jackpots/promo, slots/tables, sportsbook, reporting, access and separation of duties, keeping logs (immutable), release-management.
Cybersecurity: segmentation, vulnerability/patch management, MFA/IAM, key/secret storage control, penetration tests (on schedule/on demand), DR/BCP plan.
Geolocation for online: accurate binding to the state; anti-spoofing at the SDK/network signature/device level; regular audit reports on failures/interlocks.

Sports betting (retail and online)

Licensed retail sportsbook on the casino site and online skins through partners.
Requirements: house rules (lines/limits/cancellations), quotation change logs, conflict of interest control, anti-match fixing, settlement and deduction reporting, anti-manipulation filters and alerts.

iGaming (online casino and poker)

Separate certifications for slots/tables/poker; each vertical has its own tax and its own reporting.
Skins/market access model: online brands operate under the umbrella of terrestrial certificate holders.
AML/BSA contours: enhanced KYC, sources of funds/risk markers, CTR/SAR, wallet→payment rails monitoring, deposit/time limits, self-limiting tools.

Fantasy and VGT

Fantasy Contests: separate license, age verification (18 +), prize pool/rake/integrity of algorithms, transparency of rules.
VGT on truck stops: operator, site and each terminal are licensed; device limits and location requirements (fuel volume/traffic/infrastructure criteria), rigorous GGR reports, and technical telemetry.

Licensing Processes - Reference Launch Plan

1. 0-1 months - preliminary gap analysis by category (land-based/iGaming/sports/VGT/fantasy), ownership structure, consultation with PGCB staff.
2. 1-3 months - submission of forms for suitability (beneficiaries/officers), internal RG/AML/MICS policies, tech packages for the laboratory.
3. 3-6 months - technical testing of platforms/games, integration of CUS/geolocation/payments; MICS adjustments, staff training.
4. 6 + mo - hearings/conditional approvals, retail→online, field-monitoring and post-audit MICS.

💡 The timing depends on the complexity of the vertical structure/portfolio and the availability of the technical stack.

Operational checklists

For land casinos (Cat 1-3/Cat 4):

Full MICS coverage: cage, slots/tables, progressives, promo.
Segregation of duties, control of access to cash storages/keys.
Daily drop/count, reconciliation and timely filing reporting and payments.
Video surveillance system and storage of records according to requirements.
RG policies and staff training, age verification.

For iGaming:

Individual certifications (slots/tables/poker), version-control and immutable-logs.
Geolocation/anti-spoofing, device fingerprinting, fault log.
KYC/AML with high-risk, CTR/SAR triggers, chargeback/abuse monitoring.
Taxes and reporting by verticals, reconcile with payment registers.
Self-limiting tools and compliance with RG guides.

For sportsbook:

House Rules, limits, cancellations, line change procedures.
Integrated control (feed/anomalies), trading log.
GGR/excise reporting and bonus/parley/futures accounting.

For VGT/Fantasy:

Operator/site/terminal licenses, GGR telemetry.
Age/ID (18 + for fantasy), transparent rules/payouts.
Maintenance/replacement of components according to notification procedures.

Frequent risks and red flags

Opaque ownership and debt structure, "hidden" beneficiaries.
Mismatch of geolocation/anti-spoofing (online), poor device-hygiene.
Gaps in MICS: unauthorized changes to versions/settings, incomplete logs.
Delays in reporting/payments, errors in the distribution of taxes by verticals.
Insufficient RG communication and marketing to self-excluded/minor.

P&L Economics and Model: Accents

A high rate on slots (54%) and sports (36%) requires a thorough unit economics on promo/bonuses and strong margin analytics.
Online table games/poker (16%) - an effective margin zone with the right portfolio and spending discipline.
Accounting for local shares, regphyses, compliance-CapEx (geolocation, KYC, SIEM, audit) and laboratory approval/certification costs.

Trends 2025

Strengthening cashless/wallet auditing and transaction traceability in iGaming.
Growing requirements for cyber resilience and supply-chain security (libraries, builds, Dev→Prod).
More attention to integrity in sports: real-time anomalies, collaborations with league data providers.
Expansion of mini-casino coverage and further optimization of "skin partnerships" online.
RG metrics as board-level KPIs: early signs of problem play, "fair" gamification and transparent promos.

What's important to remember

Pennsylvania is a full-spectrum jurisdiction: land-based, iGaming, sports, fantasy and VGT, with a high but projected fiscal burden.
PGCB combines hard MICS/technical requirements and advanced RG processes (multiple self-exclusion lists).
Market success is ensured by: a crystal-clear ownership structure, reporting discipline, a strong technical circuit (geo/CUS/logging) and an accurate unit economy for differentiated tax rates.