What the 2025 gambling law means for licensed operators
The new framework is not just a change of paperwork. It reshapes what is expected of an operator, and it opens room for products that were hard to justify before.
If you already run a gaming business in Sri Lanka, the 2025 reform lands on you first. The Gambling Regulatory Authority Act, No. 17 of 2025 replaces a loose set of older arrangements with a single regulator and a formal licensing structure. Existing operators, most of whom have run under provisional registrations, are expected to transition into that structure as the detailed rules are finalised.
Here is what that shift means in practice.
From provisional registration to a formal framework
The most immediate change is status. A provisional registration was a holding position. A licence under the new Authority is a defined relationship with defined obligations. The operators who come through this transition in the strongest position will be the ones who can show, on request, that their business already runs the way a regulator expects: customers verified, funds accounted for, activity recorded, risks managed.
The transition also carries risk. An operator that cannot demonstrate sound controls when the detailed requirements arrive has more to prove, under more time pressure. Preparation now is cheaper than remediation later.
The controls that become table stakes
Modern gambling regulation converges on a familiar set of expectations. Under the new framework, an operator should expect to demonstrate:
- Know your customer. Identity, age and eligibility checked at onboarding and recorded.
- Anti-money-laundering. Screening, monitoring and clear escalation, with an evidence trail a compliance officer can produce on demand.
- Responsible gambling. Deposit and loss limits, cool-off periods and self-exclusion offered and enforced, not left to chance.
- Accurate money handling. Balances, bets and payouts accounted for exactly, with no rounding that cannot be explained.
- Reporting and audit. Records kept in a form that can be exported for the regulator and inspected without dispute.
None of this is exotic. It is the baseline of a well-run operation. The change is that it is now expected and inspectable rather than optional.
Digital scope is the open question
Most existing registrations are land-based. The Act contemplates digital gambling, but the detailed rules for online products are still being settled. A sensible operator plans for both paths: an in-venue digital offering first if that is what the early rules allow, expanding to a fuller online scope as the digital regime opens. Any partnership or platform decision should be built to handle that progression without a rebuild.
A useful test for any new product or vendor: can it start within today's rules and expand as the digital framework matures, with configuration rather than reconstruction?
The opening: a differentiated, regulated product
Regulation clears the ground for offerings that thrive on legitimacy. A well-run operator can now introduce products that customers, banks and regulators are more willing to accept, precisely because they sit inside a recognised framework. That is a commercial opportunity, not only a compliance exercise. The operators who move early, with the right controls, define the new category rather than react to it.
Build or partner
The final question the new law forces is capability. Meeting these expectations well takes software built for the purpose. An operator can try to build that in-house, or partner with a specialist that already has it. For a new category under a new framework, partnering is usually the faster and safer route, and it keeps the operator focused on the licence, the brand and the customer relationship. We look at that trade-off in detail in the next piece.