On a Saturday afternoon the compliance team at the Tankwa Gambling and Betting Board, a fictional provincial gambling regulator used throughout this series, is not at work. Its licensees are busy. A bookmaker licensed by the board takes thousands of bets through its app during a single rugby match. Its payment provider settles deposits in seconds, its marketing engine sends promotions to registered punters, and its risk system flags unusual betting patterns as they happen. The board will see a summary of that afternoon weeks later, in a monthly return submitted as a spreadsheet and a signed PDF.
Nobody at the board is doing anything wrong. Its instruments were designed for an industry of premises: casinos with floors that inspectors could walk, betting shops with counters, machines that could be sealed and counted. The industry has moved to places those instruments do not reach easily: servers, payment rails, mobile apps and advertising feeds that run every hour of every day.
This series is about closing that gap without weakening the safeguards that make regulation legitimate. It starts here with the legal landscape and the shape of the problem. The next four parts cover technology-assisted regulation, risk-based supervision, the cloud foundation a regulator needs and a single digital front door for licensing. These five parts open a longer series, and more will follow. This article is general information, not legal advice. It does not take a position on any contested legal question, and a regulator should take its own legal advice before acting on anything here.
The legal landscape, briefly
South Africa regulates gambling through concurrent national and provincial competence. The summary below was checked against primary and parliamentary sources on 7 November 2026. Section references are to the Act as published in Government Gazette 26670 of 12 August 2004, not to a consolidated text. Gambling law is moving, so check the current position before relying on it.
- The National Gambling Act 7 of 2004 came into operation on 1 November 2004 (Gazette 26958). It sets uniform national norms and standards, retains the National Gambling Board and establishes the National Gambling Policy Council (gov.za).
- Provincial licensing authorities license and supervise. Section 31 of the Act makes each provincial licensing authority responsible, within its jurisdiction, for matters that include preventing and detecting unlawful gambling, inspecting premises and gambling devices, enforcing the Act and provincial law, reviewing licences and suspending or revoking them. Section 31(1)(e) adds supervising and enforcing licensees' compliance with their obligations as accountable institutions under the Financial Intelligence Centre Act. Section 33 gives the National Gambling Board an oversight role, which includes evaluating the issuing of national licences by provincial licensing authorities and their compliance monitoring of licensees, and conducting oversight evaluations so that national norms and standards are applied uniformly.
- The National Gambling Board is still the National Gambling Board. The National Gambling Amendment Bill (B27-2018), as introduced, proposed replacing it with a National Gambling Regulator. The parliamentary record shows that the National Assembly passed the bill in December 2018, the National Council of Provinces rejected it on 14 December 2021, it lapsed and was revived, it was referred to a mediation committee on 15 May 2025, and that committee's report is dated 13 June 2025 (PMG bill page; Parliament). According to PMG's summary of a Western Cape Provincial Parliament committee meeting on 2 December 2025, the committee was told that the mediated version D retains the National Gambling Board and drops the regulator proposal (PMG). That is a report of a briefing, not the bill text. We found no record that the bill had been passed by both Houses or assented to by 7 November 2026.
- Interactive games need authorisation that has not been brought into force. Section 11 provides that a person must not engage in or make available an interactive game "except as authorised in terms of this Act or any other national law". The National Gambling Amendment Act 10 of 2008, which would regulate interactive gambling, is listed on gov.za with its commencement "to be proclaimed" (gov.za).
- The National Gambling Board distinguishes online betting. Its enforcement page states that online gambling is prohibited in South Africa "except online betting through bookmakers that are licensed in South Africa for online betting", giving sports and horse racing as examples (NGB enforcement page). Where exactly the line falls for particular products, such as casino-style or numbers games offered by licensed bookmakers, is a contested question on which a regulator would take legal advice. This series does not take a position on it.
- Remote-gambling reform had not become law. The Remote Gambling Bill (B11-2024), a private member's bill, was introduced on 16 April 2024 and is recorded as lapsed on 21 May 2024 (PMG). Acts Online reported that on 4 November 2025 the National Assembly's trade, industry and competition committee began considering whether to prepare its own remote-gambling bill (Acts Online). National Treasury published a discussion paper, The case for a national online gambling tax (2025), proposing a national tax on online gambling (National Treasury). We found no record that any of these had become law when we checked.
- Gambling businesses are accountable institutions under the FIC Act. Schedule 1 includes "a person who carries on the business of making available a gambling activity as contemplated in section 3 of the National Gambling Act", as the Financial Intelligence Centre puts it in an article for gambling institutions. The FIC's summary of the obligations includes registering with the FIC, customer due diligence, record keeping, training, a compliance officer, a risk management and compliance programme, and filing cash threshold, suspicious and unusual transaction and terrorist property reports (FIC reference guide).
The result, in broad terms, is a framework in which online betting with licensed bookmakers is growing, the legislation that would regulate interactive games has not been brought into force, and the institutions and reform proposals are still under debate. A regulator has to supervise the first, act against unlawful operators in the second and plan for whatever the third produces.
The industry has already moved
National Treasury's discussion paper The case for a national online gambling tax (2025) cites the National Gambling Board's National Gambling Statistics for the 2024/25 financial year. On that basis it reports gross gambling revenue of R74.5 billion, with betting at 69.8 per cent (about R51.97 billion) and casinos at 22.3 per cent. It reports that betting gross gambling revenue grew from around R10.6 billion in 2020/21, and that online betting represented "over 85.5 per cent" of betting gross gambling revenue in 2024/25, about R44.46 billion. These are figures as reported by National Treasury from NGB statistics, not audited results, but the direction is clear.
That shift changes what a regulator has to see. In a premises-based industry most of the evidence a regulator needs is in a building. Machines are on the floor, cash is in the count room, staff are on the roster and minors can be stopped at the door. In an online industry, most of the evidence is in systems: account registration and age verification, the betting ledger, payment flows, bonus and promotion rules, responsible-gambling limits, self-exclusion checks and the logs that show which rules ran.
Where the gap opens
The gap between an online industry and an analogue regulator is not one problem. At the fictional Tankwa board it shows up in five places.
- Evidence arrives late. Monthly returns describe last month. A suspicious pattern, a failed age-verification control or an outage in a self-exclusion check is visible to the licensee within minutes and to the board weeks later, if at all.
- Evidence arrives as documents, not data. A return that arrives as a PDF has to be retyped or read by a person before it can be compared with last month's return, another licensee's return or the tax declaration. The board has the information in principle, but it cannot use it as data.
- Supervision follows the calendar. Inspections are scheduled by licence type and date. A large online bookmaker and a small retail outlet can receive the same attention, regardless of where the risk is.
- Licensing is a paper journey. Applications, key-employee licences and renewals move by email, courier and spreadsheets. Applicants cannot see their status and officials spend time chasing missing documents instead of assessing them.
- Unlawful operators are fast. Offshore sites offering unauthorised casino games change domains, payment routes and advertising channels quickly. Enforcement that depends on letters and manual searches falls behind. The National Gambling Board's call for expressions of interest of 30 June 2026, amended by an erratum on 17 July 2026, for "a monitoring, tracking, blocking and reporting solution" for illegal online gambling websites (NGB) shows the problem is recognised nationally.
None of these gaps is caused by a lack of law. The National Gambling Act already gives provincial authorities the duties to license, inspect, enforce and supervise FIC Act compliance. The gap is operational. It lies between the duties in the Act and the instruments available to carry them out.
What "not analogue" means, and what it does not
It is tempting to treat this as a technology procurement: buy a portal, a dashboard and perhaps an AI tool. That would repeat a familiar mistake. As Digitising bureaucracy is not transformation argues, a seven-step paper process that becomes a seven-step online process is still a seven-step process.
For a regulator, "not analogue" means four things.
- Evidence as data. Returns, incident notifications and licence applications arrive as structured data that can be validated on arrival, compared over time and linked to the licensee's record.
- Supervision by risk. Attention goes where the risk is, using a model officials can explain and challenge. Part 3 covers this.
- A governed foundation. Regulatory data includes commercial information, personal information and intelligence. It needs a cloud and data foundation designed for that, which Part 4 covers.
- One front door. Licensees, applicants and the public deal with the regulator through one service, not a set of email addresses. Part 5 covers this.
It does not mean automated decisions. Granting, refusing, suspending or revoking a licence affects the rights of the people involved. Whether, and how, the Promotion of Administrative Justice Act applies to each kind of decision is a question for the regulator's legal advisers, but the design should assume that decisions must be lawful, reasonable, procedurally fair and supported by reasons. Technology can prepare the evidence, highlight the risk and record the reasons. An accountable official makes the decision. Human-in-the-loop is not administrative justice explains why an official's signature alone is not enough, and the same test applies here.
Legal uncertainty is a design input, not a reason to wait
A regulator might reasonably wait for the law to settle. The National Gambling Amendment Bill was introduced in 2018 and had not completed its passage when we checked, and remote-gambling legislation could change the role of national and provincial bodies.
Waiting is the more expensive choice. Whatever the final law says, a regulator will still need to receive structured returns, maintain licence records, analyse risk, keep evidence that can stand up in a review and serve applicants online. These capabilities do not depend on how the reform debate ends. What depends on the outcome is the configuration: which modes are licensed, who holds which register and which body monitors which systems.
The practical approach is to build for change.
- Keep rules about licence types, fees and return formats in configuration and versioned rule sets, not hard-coded screens. A policy document is not an executable rule shows the discipline.
- Design data exchange with national systems, such as the national registers and the national central electronic monitoring system for limited pay-out machines that section 27 of the Act requires the National Gambling Board to maintain, as interfaces that can be redirected if responsibilities move.
- Record which legal provision each capability serves, so a change in the law becomes a list of affected capabilities rather than a rewrite.
A self-check for regulators
| Question | Analogue answer | Digital answer |
|---|---|---|
| How soon do you see a material incident at a licensee? | At the next return or inspection | Within an agreed notification window, as structured data |
| How do returns arrive? | PDF and spreadsheet attachments | Validated data, through a portal or an API |
| How is inspection effort allocated? | By calendar and licence type | By an explainable risk model, with a minimum baseline |
| Can an applicant see the status of their application? | By phoning an official | Online, at every stage |
| Can you reconstruct why a licence decision was made? | From a paper file, if complete | From a case record that links evidence, rules and reasons |
| How do you detect unlicensed online operators? | Complaints and manual searches | Monitoring, shared intelligence and recorded referrals |
| What happens when the law changes? | Systems are rebuilt | Rules and configuration are updated and versioned |
A regulator using this table will usually find itself in both columns. The value of the table is in choosing which row to move first.
Key points
- The National Gambling Board's position is that online betting is lawful only with bookmakers licensed in South Africa for it. Section 11 of the National Gambling Act prohibits interactive games unless authorised, and the 2008 amendments that would regulate them had not been brought into force. Reform bills were pending or lapsed on 7 November 2026. This is general information, not legal advice.
- National Treasury, citing NGB statistics, reports that betting made up most gambling revenue in 2024/25 and online betting most of betting revenue. The regulator's evidence now lives in licensees' systems.
- The gap between online industry and analogue regulator is operational, not legal. It appears in late evidence, documents instead of data, calendar supervision, paper licensing and slow enforcement.
- "Not analogue" means evidence as data, supervision by risk, a governed foundation and one front door. It does not mean automated decisions.
- Legal uncertainty is a design input. Build for change rather than waiting for the law to settle.
This is part 1 of Regulating a Digital Gambling Economy. Next: What is technology-assisted regulation?
For the wider public-sector context, see What an AI-native government actually means in the Rewiring Government series.
Background reading: National Gambling Act 7 of 2004; National Gambling Amendment Act 10 of 2008; National Gambling Amendment Bill B27-2018 (PMG); National Gambling Board mandate; The case for a national online gambling tax (National Treasury, 2025). All checked on 7 November 2026. This article is general information, not legal advice.
How CloudNala can help
CloudNala works with public bodies that regulate fast-moving industries to map their statutory functions against the instruments they actually use. For a gambling regulator, that means a short review of how evidence arrives, how supervision is allocated, how licences move and where online activity is out of reach. The output is a prioritised list of capabilities that hold up under any likely outcome of the reform debate. We do not give legal advice. We work alongside your legal advisers so that the technology plan follows the law.
Work with CloudNala
CloudNala helps organisations move from technology ambition to practical execution across cloud, AI, data, platform engineering and digital services.
Whether you are exploring AI, modernising your cloud environment, building a public-sector digital service, or turning an idea into a working MVP, we can help you shape the roadmap and deliver the next step.
Book a Regulatory Technology Review or write to us at consult@cloudnala.co.za
