The games were genuine. The websites were not licensed in Great Britain. That distinction sits at the centre of the Gambling Commission’s July 2026 case against Evolution Malta Holding Limited: five Evolution games appeared on six websites run by two operators without a Commission licence, while those sites were accessible to British consumers. The regulator said its concern was not a counterfeit slot or a missing software licence, but a supplier’s failure to identify and control where its games were being offered. Gambling Commission public statement · Regulatory action record
Evolution agreed to pay £4.75 million in lieu of a financial penalty, fund investigation costs and submit to an independent audit condition as part of a regulatory settlement. The amount should not be called a conventional fine. Nor does the case mean every site carrying an Evolution game was unlicensed: the public finding concerns a defined set of games and websites accessible to consumers in the Great Britain market. Settlement statement
How the same game crossed a licence boundary
Evolution holds British gambling-software and casino game-host licences, according to the Commission. Those authorisations describe the supplier’s role. They do not turn an unrelated casino website into a licensed British operator. Our supplier-versus-operator licence guide explains that separation; the Evolution case shows why the distinction is not merely administrative. A product built by a licensed supplier can still be offered through a website lacking the licence required to serve GB consumers. Commission case announcement and licence note
The Commission says it saw what appeared to be Evolution games on the websites in August 2024. It notified Evolution in December 2024, after which the company confirmed that the games were genuine and immediately, permanently geo-blocked them to GB consumers on those sites and on other sites where they were found. The regulator also says it had information suggesting large volumes of UK consumer visits to the six websites between December 2023 and November 2024. It does not publish a verified visitor count or name the two operators in the statement. Commission chronology
What a geo-block could not explain
Geo-blocking is a containment action, not a retrospective explanation of how distribution escaped scrutiny. It can prevent access from a jurisdiction after a problem is found; it cannot by itself replace knowing who receives the games, whether that party is licensed there and what a downstream website actually offers. That is an operational inference from the case. The public record does not disclose Evolution’s complete contract chain or the precise technical route by which each game reached each site.
The risk assessment looked past the third party
The Commission concluded that Evolution’s 2024 money-laundering and terrorist-financing risk assessment was not appropriate between April 2024 and January 2025. It said the assessment did not adequately cover third-party risk, leaving it unable to highlight that two customers were supplying Evolution games to the GB market without Commission licences. Policies on due diligence and ongoing monitoring of sub-licensees also lacked detail, including enhanced measures for higher-risk relationships. Regulator’s findings on licence condition 12.1.1
That finding is narrower and more useful than saying the company “did no checks.” The Commission’s criticism is that the assessment and controls were insufficient and not effective in this situation. It also found a breach of licence condition 12.1.2 relating to money-laundering regulations between the same April-to-January period, identifying inadequate risk identification, controls and customer due diligence. These were regulatory findings about Evolution’s systems, not a criminal finding against an identified employee or proof that a specific player’s funds were laundered. Public statement, licence condition 12.1.2
The problem is visible in the way a casino game moves. A studio can deliver a title through hosting, aggregation or other commercial relationships before it appears in a lobby. Our studio-to-lobby distribution story follows those hand-offs. Each hand-off creates another place where supplier identity, permitted market and live site can drift apart. The Commission has not published a full map of Evolution’s route in this case, so that general distribution model should not be mistaken for a reconstruction of these six sites.
Why an approved game is not an approved website
For a reader seeing a familiar live-dealer product on a casino page, the brand can look like reassurance. It is not a substitute for checking the entity operating the website and its licence for the customer’s jurisdiction. The Commission’s statement explicitly says these were *genuine* Evolution games on sites operated by unlicensed businesses accessible to GB consumers. The authenticity of a game and the authorisation of the venue answered different questions. Gambling Commission case summary
The regulator framed this as a supplier-oversight and anti-money-laundering case rather than simply a broken screen label. It said the licence breaches gave rise to financial gain for Evolution and flagged the potential impact on protecting vulnerable people as aggravating factors. The public statement does not put a number on that gain, identify affected individual customers or quantify gambling harm. Those omissions matter: a settlement amount is not a measure of player losses. Aggravating factors
Our post-launch game-monitoring guide covers why checking a game before release is not the end of oversight. This case adds a different post-launch question: not only “is the game operating correctly?” but “where can a British customer find it now?” The Commission’s good-practice section asks suppliers whether they know all sites carrying their games and whether they periodically check. Those are the regulator’s own questions, not a promise that any single software tool can solve the problem. Commission good-practice questions
The settlement leaves a live assurance test
The July settlement requires a £4.75 million payment in lieu of a financial penalty, publication of the facts, a contribution to investigation costs and a variation of Evolution’s operating licence requiring an independent audit within 12 months of the review’s conclusion. Evolution’s swift action plan, cooperation and early acceptance were treated as mitigating factors. The audit is a future assurance mechanism; the cited July statement does not report its results. Regulatory settlement and factors
The Commission said subsequent testing had not found further instances of concern at the time of its announcement. That is a bounded observation, not a permanent all-clear for every market or distribution partner. The enduring lesson is about visibility beyond the immediate customer contract. A licensed supplier has to know where its game can actually be reached, not merely who first signed for it. Commission enforcement announcement
