Operating in the United States means navigating a compliance landscape that shifts dramatically depending on which vertical you run, which states you serve, and how your product is legally classified. No single federal framework governs online gambling, so operators must treat each state as its own jurisdiction, with its own definitions, prohibited practices and enforcement appetite.
Why Vertical Classification Drives Everything
Before examining geography, operators must understand that US regulators classify products first, then apply rules accordingly. A real-money online casino in New Jersey operates under the Division of Gaming Enforcement. A daily fantasy sports product in the same state answers to a different set of statutes. A sweepstakes casino sits outside licensed gambling law entirely, but only as long as it respects the legal conditions that create that exemption. A crypto-based gaming product may fall under none, some or all of the above depending on how tokens are structured and redeemed.
Getting the classification wrong is the root cause of most enforcement actions. Operators should conduct a vertical audit before entering any new state, confirming how regulators and courts in that jurisdiction have interpreted comparable products.
Licensed Real-Money Casinos and Sportsbooks
Six states currently permit licensed online casino gaming: New Jersey, Pennsylvania, Michigan, West Virginia, Delaware and Connecticut. Each issues its own licence, requires local server infrastructure or approved hosting arrangements, mandates responsible gambling tools to specific technical standards, and imposes ongoing AML reporting obligations that mirror FinCEN rules but add state-level layers.
Sports betting is live in more than thirty states, but the compliance picture is equally fragmented. Some states, such as Nevada and New Jersey, have mature regulatory infrastructure. Others have passed legislation quickly and enforcement capacity has not kept pace, creating grey areas around promotional wagering, data sourcing and geolocation accuracy.
- Geofencing must meet state-specific accuracy thresholds, not just a generic standard.
- Promotional terms, including deposit matches and free bets, are reviewed and sometimes pre-approved by state regulators.
- Self-exclusion lists are state-managed; operators must integrate with each relevant list separately.
Sweepstakes Casinos: The Federal Exemption and Its Limits
Sweepstakes casinos exploit a long-standing federal exemption that permits promotional sweepstakes provided three conditions are met: no purchase is necessary to enter, prizes are awarded by chance, and the promotion has clearly defined rules. Because players can obtain virtual currency without payment, the model avoids classification as gambling in most jurisdictions.
However, several states have either excluded themselves from this framework or applied narrow interpretations that effectively prohibit sweepstakes gaming. Idaho, Washington, Michigan and a handful of others present elevated risk. Michigan is a particular case study: the state has real-money casino licensing and has signalled regulatory interest in sweepstakes products that replicate casino experiences closely enough to blur the line.
Operators should treat the sweepstakes exemption as a legal condition to be maintained continuously, not a one-time classification decision. Any feature change, new prize category or redemption mechanism can alter a product's legal status in specific states.
Practically, this means sweepstakes operators need ongoing state-level legal review, a robust geoblocking infrastructure that can be updated quickly, and terms and conditions that accurately reflect how the product works in each jurisdiction where it is accessible.
Crypto Gaming: The Most Uncertain Vertical
Products that use blockchain-based tokens for wagering face compounded uncertainty. State gambling definitions were written before cryptocurrency existed, and regulators are applying them inconsistently. Key questions that remain unresolved in most states include whether a non-fungible token constitutes a prize, whether a stablecoin redemption pathway converts a sweepstakes into a gambling transaction, and whether a decentralised protocol has an identifiable operator who can be held liable.
Operators running crypto gaming products should assume that any state with active licensed gambling will scrutinise their product closely. States such as Nevada, New Jersey and Pennsylvania have gambling control boards with broad investigative authority and a track record of issuing cease-and-desist notices to unlicensed operators.
- Token structures must be reviewed against both gambling statutes and money transmission laws in each target state.
- Where tokens have demonstrable cash value, state money services business registration may be required independently of any gambling determination.
- AML obligations apply to crypto operators under FinCEN guidance regardless of whether a state gambling licence is in place.
Building a Compliant Multi-State Strategy
Operators entering or expanding across US states benefit from a structured compliance matrix that maps each vertical against each target state's current legal status, enforcement history and pending legislation. This matrix should be a living document, updated at least quarterly given the pace of legislative change. Compliance officers should maintain direct relationships with state gaming control boards where possible, as informal guidance often precedes formal rulemaking.
OnlineShine supports operators in building these compliance frameworks, combining regulatory mapping with operational implementation so that geoblocking, AML controls and responsible gambling tools are deployed in alignment with each state's specific requirements rather than a lowest-common-denominator approach.
