Skip to content
White Hat Gaming logo

White Hat Gaming Review: PAM, Integration & Commercial Terms

A credible regulated-market PAM with a differentiated Travelling Wallet, managed operations and a strong contractual trust position; pricing amounts remain opaque and the deal structure is long-term, partner-heavy and operationally demanding.

White-labelTurnkeyStandalone

7.1/10

Research and review by Alec SablePage updated September 6, 2026Facts checked August 2, 2026Editorial recordConfidence High · 53% marked verifiedConfidence is our editorial assessment of the published conclusions. The percentage is the share of 373 populated data points we currently consider verified (197 of 373); it is not based on citation count or profile completeness.

Operator decision

Fit and verdict

Shortlist White Hat for regulated PAM, cross-state wallet and managed operations. The known contract terms provide a credible negotiation baseline, but diligence the license model, supplier boundaries, SLA exclusions, renewal window, early-exit economics and full TCO before signing.

Main risk: Hybrid B2B/B2C role and contractual dependence, compounded by a non-clean compliance/operational record.

Who it's for

  • Regulated US or tribal operators needing PAM, state-aware wallet and managed operations
  • UK/Malta brands that deliberately want a provider-licensed white-label structure.

Who should skip

  • Crypto/Web3 operators
  • buyers requiring fixed price amounts, established RPO/RTO or API limits, a wholly in-house sportsbook/content stack, short cancellable terms or zero provider-operated B2C exposure.

Capability coverage

Company 50%Launch 77%Casino 55%Tech 55%Ops 65%Markets 92%Pricing 88%

Share of yes/no capabilities marked Yes per category. Breadth, not quality.

Why this score

Holistic editorial judgment, not a feature formula. Contractual SLA, data-ownership, free-export and transition terms materially strengthen trust, while broad exclusions, long auto-renewing terms, paid run-off, redacted economics, partner dependence, provider-operated B2C exposure, repeated control defects and regulatory history preserve the existing discount.

Decision gates

Delivery route
White-label, Turnkey, StandaloneThe proprietary PAM is available as a full suite, operator-licensed turnkey or standalone modules; White Hat also operates provider-licensed white-label brands in the UK/Malta model.
Market route
Great Britain, Malta, North America25 North American geographic markets represented by 27 approvals or registrations across 26 licensing authorities.
Launch timing
About three months for an already licensed replatform; longer for a new jurisdictionVIP Play moved from signature on 7 February 2025 to Tennessee launch on 12 May 2025. Its West Virginia project never launched despite interim approval.
Commercial visibility
No
Exit support
YesOperator-licensed PAM includes commercially reasonable transition services, continued access and functionality for a mutually agreed run-off period of up to one year.

Decision record

Delivery evidence, contract boundaries and provider-specific legal, technical and market records. Ledger rows retain their entity, product, market, status and date boundaries; unresolved terms remain unresolved.

Delivery record

Recent delivery and product events

G2 Digital/Vegas Club Casino live in New Jersey from June 2026; VIP Play Tennessee replatform in May 2025; Potawatomi and Desert Diamond PAM agreements from 2025

Vegas Club launched in New Jersey in June 2026 on White Hat PAM. Potawatomi and Desert Diamond remain agreements without established go-live evidence. VIP Play subsequently initiated a wagering wind-down in 2026.

Verified conclusion

Setup-timing evidence

About 13 weeks in the VIP Play Tennessee replatform

New-market licensing, certification, market access and third-party work can extend or prevent launch.

Verified conclusion

Delivery-time conclusion

About three months for an already licensed replatform; longer for a new jurisdiction

VIP Play moved from signature on 7 February 2025 to Tennessee launch on 12 May 2025. Its West Virginia project never launched despite interim approval.

Editorial inference

Implementation ownership

Dedicated

Dedicated Delivery Managers and a joint Launch Plan cover responsibilities, testing, timelines, costs and acceptance.

Verified conclusion

Deal, resilience and exit boundaries

A provider-level conclusion can still be product-, customer- or contract-specific. The boundary under each value controls how far the value can be applied.

Setup fee

Unresolved

Quote-only; no defensible market benchmark.

Minimum contract term

4 years

Followed by automatic two-year renewal terms.

Verified conclusion

Termination notice

180 days before term end

Required to prevent automatic renewal after the four-year initial term or subsequent two-year term.

Verified conclusion

Player-data ownership

Operator

In operator-licensed PAM, traffic, transaction, personal and customer information belongs to the customer or its licensors; White Hat receives only processing rights needed to perform the services. Provider-licensed white label remains a separate model.

Verified conclusion

Outbound migration support

Yes

Operator-licensed PAM includes commercially reasonable transition services, continued access and functionality for a mutually agreed run-off period of up to one year.

Verified conclusion

SLA service credits

Yes

Service credits apply below 99.7% monthly availability. The table is redacted, applies only to affected states/users and is the customer's sole availability remedy.

Verified conclusion

Liability cap

Mutual cap exists but formula and amount are redacted; indirect, consequential, lost-profit, lost-revenue and data-loss damages are broadly excluded, subject to carve-outs

Carve-outs include fraud, willful misconduct, gross negligence, confidentiality and specified indemnities.

Verified conclusion

Recovery objectives

Unresolved

Numerical recovery point and recovery time targets remain unresolved.

Launch evidenceContract benchmarksData and exit recordSLA, incident and recovery record

Entity, assurance and market ledger

Legal entities and permissions

8 records · 3 named entities · 1 unconfirmed record · 2 unresolved boundaries

  • Indiana

    White Hat Gaming Inc. · Supplier registration / approval · Permanent Supplier Licence · Renewal order 2026-055

    Active

    Sportsbook products plus payments, risk, fraud and compliance services.

    The permission remained active after its June 2026 renewal; the next expiry date remains unresolved.

    Verified conclusionStatus checked August 2, 2026Valid from June 25, 2026

  • Michigan

    White Hat Gaming Inc. · Supplier registration / approval · Internet Gaming Supplier; Sports Betting Supplier · Internet gaming IGSL007451 · Sports betting SBSL007451

    Active

    PAM, payments, risk and related supplier services in Michigan.

    A suffix such as -26-003 is a board-file identifier, not the reusable supplier number.

    Verified conclusionStatus checked August 2, 2026Valid from January 13, 2026

  • Pennsylvania

    White Hat Gaming Inc. · Supplier registration / approval · Interactive Gaming and Sports Wagering Manufacturer · GID 127858

    Active

    Interactive-gaming and sports-wagering platform services in Pennsylvania.

    The current renewal covers the exact White Hat Gaming Inc. iGaming and Sports Wagering Manufacturer permissions. Product approvals and named deployments remain separate.

    Verified conclusionStatus checked August 19, 2026Valid from July 22, 2026Valid through July 21, 2031

Unresolved boundaries

  • Remaining North American permissions within the 27-entry footprint

    Wisconsin OIGRC 25-263 and WHT Limited's Alberta registration are exact records. For the remaining state, provincial, territorial and tribal permissions, the identifier, class or current status remains unresolved.

    Supported conclusionStatus checked August 9, 2026

  • MGA Recognition Notice RN/026/2025

    RN/026/2025 was issued on 5 January 2026 and replaced MGA/B2B/1004/2023. The underlying equivalent authorization, exact permitted activities and current status remain unresolved.

    Supported conclusionStatus checked August 2, 2026

Open full record (+5)Data through September 6, 2026

Technical and assurance records

0 records · 0 subjects · 0 unconfirmed records · 3 unresolved boundaries

No complete technical or assurance record is attached to this provider. Partial known facts remain in the unresolved boundaries recorded below; this does not establish that the provider is uncertified.

Unresolved boundaries

  • White Hat Gaming cashier PCI SAQ A scope

    SAQ A is a scoped self-assessment rather than an enterprise certificate. Exact legal holder, completed questionnaire, assessed payment flow, period and current term remain unresolved.

    Supported conclusionStatus checked August 9, 2026

  • White Hat annual SOC 2 Type II contractual requirement

    White Hat Gaming Limited (C73232) is contractually required to obtain an annual SOC 2 Type II audit report for its customer-information security program. This establishes an independent-audit obligation, not completion of a current report. Report holder, auditor, period, opinion, trust-service scope and current report remain unresolved.

    Verified conclusionStatus checked August 9, 2026

Open full record (+1)Data through August 20, 2026

Market implementation record

6 records · 6 markets · 0 unconfirmed records · 1 unresolved boundary

  • New Jersey

    White Hat Gaming PAM · PAM / player platform · Supplying entity unresolved · Vegas Club Casino New Jersey / G2 Digital / Vegas Club Casino

    Live deployment

    PAM production for Vegas Club Casino.

    The exact New Jersey supplier permission identifier remains unresolved in the normalized permission register.

    Live from June 2026; the exact go-live day remains unresolved.

    Verified conclusionStatus checked August 12, 2026

  • Alberta

    White Hat Gaming PAM · PAM / player platform · WHT Limited

    Registration only

    Registered for Alberta platform and PAM supply.

    No named Alberta production deployment or exact technical approval is established.

    Verified conclusionStatus checked August 12, 2026

  • Great Britain

    White Hat Gaming platform and licensed operation · Multiple modules · White Hat Gaming Limited

    Registration only

    Bingo, casino, gambling software and real- and virtual-event betting activities.

    The combined permission includes operator and supplier activity; neither role is inherited by other White Hat entities.

    Verified conclusionStatus checked August 20, 2026

Unresolved boundaries

  • White Hat Gaming PAM · Alberta

    A named live Alberta customer, exact technical approval and go-live date remain unresolved.

    Editorial inferenceStatus checked August 12, 2026

Open full record (+3)Data through September 6, 2026

What changed

The latest material updates affecting this review. Minor layout and spelling changes are excluded.

  1. September 6, 2026methodology

    Provider capability lists given canonical vocabularies

    Twenty-six capability lists now use one closed vocabulary across all 18 providers, markets and languages use one canonical name, and the published score is held only as a number. No provider score changed.

    Full record

  2. September 6, 2026methodology

    Provider dataset values typed

    White Hat Gaming: One conclusion that no longer answers its field is now recorded as unresolved with its explanation kept as a scope note, and 20 scope notes were rewritten. The score is unchanged.

    Affected: Local language packs

    Full record

  3. August 20, 2026correction

    Current UKGC license revisions synchronized

    Current UKGC revision -008 replaces -007; the licensed activities and 7.1 score are unchanged.

    Affected: Provider licenses, Last editorial update

    Full record

White Hat Gaming product surfaceProduct surface ↗

Data by category

Company

50% · 71 facts

Launch

77% · 55 facts

Casino

55% · 81 facts

Tech

55% · 17 facts

Ops

65% · 70 facts

Markets

92% · 41 facts

Pricing

88% · 35 facts

Hide empty fields

Company, track record & vendor viability

At a glance

Founded year
2012The operating brand dates itself to 2012; White Hat Gaming Limited was incorporated in Malta on 25 November 2015.
Entered B2B year
2012White Hat began as a platform and managed-services business; the current Malta legal entity was formed later.
Founded country
MaltaThe business is Malta-based; the exact place of the 2012 operating-brand formation remains unresolved.
Headquarters
Mosta, MaltaThe head-office address is Cornerstone Business Centre in Mosta.
Dev centers
Malta, United Kingdom, Gibraltar, Cape Town, South Africa, United StatesOffices operate in Mosta, London, Gibraltar, Cape Town and Chicago; the engineering allocation by office remains unresolved.
Legal entity
White Hat Gaming Limited (Malta, C73232); White Hat Gaming Inc. (Delaware file 7738616, incorporated 6 December 2019)The Malta entity holds the UK and Malta B2C authorisations and operates provider-licensed B2C brands. The Delaware entity supplies PAM and related technology under North American supplier approvals.
Ownership type
Part-of-groupThe operating entities sit inside a privately held group with multiple holding layers.
Company size
501–1,000The current employment band is 501–1,000; the exact headcount remains unresolved.
Headcount trend
StableCurrent hiring and a 550-plus workforce support a stable conclusion; exact year-on-year change remains unresolved.
Track record years
14Measured from the 2012 foundation through July 2026; the Malta entity itself dates from late 2015.
Funding status
Private-fundedThe business is privately held with no established VC, PE or public-market funding round. Bootstrapped status and ultimate shareholders remain unresolved.
Target segment
Mid, EnterpriseNamed deployments and regulatory footprint are best suited to established regulated operators and larger tribal properties.
Team tenure
Established specialist executive and engineering teamThe executive team has established sector experience; exact joining dates are incomplete.
In house game studio
NoWhite Hat Studios is a separate sister-company branch, not an in-house PAM module or the same operating entity. Its sale to Merkur is agreed but remains subject to regulatory approval.

Analyst take · company & viability

The operating business is stable: 550-plus people, current hiring, five offices and continuing commercial and tribal mandates. Ownership remains opaque across several holding layers; UBOs and audited financials remain unresolved. On 15 July 2026 Merkur agreed to acquire White Hat Studios, subject to approvals. The transaction excludes White Hat Gaming's PAM and white-label businesses, so it changes the affiliated-content relationship rather than platform ownership.

Company viability signals

Employee growth signal

FlatActive vacancies and a 550-plus team indicate continuing operations; net workforce growth remains unresolved.

Client churn signal

MediumPenn had stopped using White Hat's PAM by January 2024, and VIP Play launched on White Hat in May 2025 before initiating a wagering wind-down in 2026. Those exits arose in wider operator replatforming or strategy changes and are not evidence that White Hat caused the churn. Bally's, the June 2026 Vegas Club launch and recent tribal agreements offset the signal.

Financial runway signal

Stable operating signals; limited current financial transparencyRegulatory continuity, active hiring and contract wins are positive; current audited accounts, cash figures and institutional funding remain unresolved.

Rd investment signal

StrongWhite Hat maintains proprietary PAM, cashier and Travelling Wallet technology, active releases and a 25-plus-person QA team, indicating sustained engineering investment.

Key person dependency

MediumFounder and long-serving executives remain prominent, but operating responsibility is distributed across a full C-suite.

Trust & due diligence

Green flags

  • Proprietary PAM, cashier and Travelling Wallet
  • broad North American approvals
  • Bally's, the live June 2026 Vegas Club launch and recent tribal mandates
  • 99.7% SLA with service credits and 15-minute P1 response
  • operator ownership of data, free exit export and up-to-one-year transition support
  • annual SOC 2 Type II contractual obligation.

Ownership transparency

OpaqueCorporate holding layers are visible, but ultimate beneficial shareholders remain confidential.

Financial stability

StableBusiness continuity is stable, with current hiring, a 501–1,000 employment band, license renewals and named commercial relationships. Current audited accounts and revenue remain unresolved.

Regulatory actions

FinesWhite Hat Gaming Limited paid a £1.3m UKGC settlement in December 2020 for AML and social-responsibility failings. White Hat Gaming Inc. separately settled Indiana supplier matters for $10,000 in September 2021 and $1,500 in March 2022. Platform defects also contributed to operator penalties involving duplicate-account, self-exclusion and spending-limit controls. A late-2025 New Jersey decision determined that White Hat content remained live after a transactional waiver expired and reserved possible discipline. Finland's 2026 hearing letter had not produced a final prohibition order or fine by 2 August 2026.

Litigation history

DisputesWhite Hat Gaming Limited pursued a US trademark opposition against White Hart Games LLC and obtained default judgment on 24 September 2025. No material operating or commercial litigation involving the PAM business is established.

Company details

White Hat Gaming brand mark.Logo asset/provider/logo/white-hat-gaming.svgMerkur agreed on 15 July 2026 to acquire White Hat Studios, subject to regulatory approval. White Hat Gaming's PAM and white-label businesses are expressly excluded and remain under current ownership. Until closing, Studios remains a separate sister branch; after closing it would be an external content supplier.Parent groupWhite Hat Malta Holding Limited group; separate White Hat Gaming and White Hat Studios branches, with the Studios sale pendingNotable awardsAmerican Gambling Awards Platform Provider 2023EGR Global B2B White Label Partner 2023 and 2024EGR North America Full-Service Platform Provider 2024SBC North America Platform and Innovation awards 2022Product access is sales-led; no self-serve sandbox or demo is offered.Demo availableNoPlayer-sustainability and safer-gambling practices are established. Consolidated ESG reporting and assured sustainability metrics remain unresolved.ESG responsible businessPartialLinkedIn headcount501–1,000Current revenue remains unresolved; the operating workforce baseline is 550+ people.Crunchbase tracxn listedYesFounder namedMax WrightA current corporate ambassador and material consumer sponsorship are not established.Brand ambassadorsNoneWebsite languagesEnglishThe architecture uses an AWS hub-and-spoke model and a real-time event layer built on Kafka and Segment.Tech stack publicAWS cloud hubcertified in-state hardware spokesKafka and Segment event feedWhite Hat Studios remains an affiliated supplier in a separate corporate branch until its agreed sale to Merkur closes; it would then become an external supplier. The others are already third-party content suppliers.Named game partnersWhite Hat StudiosEvolutionEzugiPragmatic PlayOn named deployments.Sportsbook feed providerKambiNo meaningful B2B software-review corpus exists on G2 or Capterra for White Hat.G2 capterra listedNoVegas Club is a New Jersey-approved site using White Hat PAM. VIP Play's wind-down was tied to its own position, not assigned to White Hat. The late New Jersey waiver correction and Finnish hearing remain diligence items; no final fine or Finnish prohibition order is established.Recent news signalG2 Digital's Vegas Club Casino went live in New Jersey on White Hat PAM in June 2026; Merkur's agreed White Hat Studios acquisition remains approval-pending and excludes the PAM and white-label businessesThis is a pending sale of the content branch, not a sale of White Hat Gaming or its platform.Notable milestoneThe 2025 restructuring separated the platform and White Hat Studios into distinct branches; on 15 July 2026 Merkur agreed to acquire Studios, subject to regulatory approval, while excluding the PAM and white-label businessesZero structured B2B operator reviews.Operator reviews count0Multiple named partnerships have exact operator and market scope.Reference clients verifiableYesNo White Hat cyber intrusion or player-data breach is established as of 2 August 2026; this is not a warranty that none occurred.Data breach historyNoneFounder and executive leadership are established.Key people publicYesJuly 2026 sample: 61 consumer reviews, 92% one-star. The complaints concern provider-licensed B2C brands and do not measure B2B platform delivery.Complaints patternTrustpilot 1.7/5 from 61 consumer reviews; recurring withdrawal, KYC/account-closure and communication complaintsA broad proprietary AI platform, validated model suite and dedicated AI leadership are not established. Rules engines are not classified as machine learning.AI ML depthPartner-led CRM/KYC plus an in-house behavioural safer-gambling algorithm
Annual revenue est—Audited revenue and a defensible revenue range remain unresolved.
Operator reviews score—A representative B2B operator-review score remains unresolved. The consumer Trustpilot score is not a substitute.
Exit experience—Known closures and replatforming do not resolve database portability, transition quality or exit charges for a completed operator exit.

Verticals

CasinoLive casinoSportsbookBingo
3,000+
games
Games count
130+
studios
Game studios
32
brands
Live brands count
14
years
Track record years
501–1,000
staff
Company size
27
markets
Markets covered count

How White Hat Gaming compares

PAM, integration and data-control fit

Compared with EveryMatrix, White Hat is more narrowly PAM- and managed-operations-led, with a distinctive US state wallet; EveryMatrix offers a broader and clearer modular product suite. Procurement should compare contract transparency and partner dependencies, not just feature checklists.

The rows focus on the operator-owned platform boundary. They do not turn feature breadth into a score.

White Hat Gaming logoWhite Hat Gaming
versusEveryMatrixEveryMatrix logo

Overall score

Overall score

PAM
Yes
Verified
YesGamMatrix is now EveryMatrix Platform.
Verified
Open API
YesOne February 2025 PAM contract includes APIs and required documentation when the operator or its third party manages the frontend. This is a customer-gated partner API, not a self-serve developer platform.
Verified
YesFull API access is offered for bespoke front ends and modular third-party integration.
Verified
Wallet model
SingleOne account carries cash, bonus and loyalty across supported products and US states, while state-specific ledger accounts preserve regulatory reporting.
Supported
SeamlessSupports one cross-product wallet and external/multi-wallet integrations.
Supported
Data residency
YesThe customer can elect cloud or jurisdiction-local hub-and-spoke infrastructure subject to regulation, with dedicated or isolated multi-tenant deployment.
Verified
By-requestTippmixPRO keeps customer data inside Hungary through a new local data center with more than 100 servers. This establishes named local-residency delivery, not a standard self-service hosting option.
Verified
Multi-brand
YesThe Malta entity supports multiple active and white-label domains.
Verified
Yes
Supported
Outbound migration
YesOperator-licensed PAM includes commercially reasonable transition services, continued access and functionality for a mutually agreed run-off period of up to one year.
Verified
UnresolvedMigration-out service, handover scope and exit-team assignment are contract-specific.
Operator fit
Mid, EnterpriseNamed deployments and regulatory footprint are best suited to established regulated operators and larger tribal properties.
Inferred
Mid, EnterpriseThe primary segments are tier-1 operators, state lotteries and funded challenger brands.
Supported
White Hat Gaming logoWhite Hat Gaming
versusPragmatic SolutionsPragmatic Solutions logo

Overall score

Overall score

PAM
Yes
Verified
YesPAM is the company's core product. The platform is built around the player account, wallet, CRM, bonus, payments and KYC/AML tools.
Verified
Open API
YesOne February 2025 PAM contract includes APIs and required documentation when the operator or its third party manages the frontend. This is a customer-gated partner API, not a self-serve developer platform.
Verified
YesOpen, API-first platform with a self-service REST/WebSocket API workspace on Postman.
Verified
Wallet model
SingleOne account carries cash, bonus and loyalty across supported products and US states, while state-specific ledger accounts preserve regulatory reporting.
Supported
SingleOne unified wallet holds real cash, bonus, unsettled bets and loyalty points, with operator-set rules per balance type.
Verified
Data residency
YesThe customer can elect cloud or jurisdiction-local hub-and-spoke infrastructure subject to regulation, with dedicated or isolated multi-tenant deployment.
Verified
By-requestThe current AWS integration supports jurisdiction-specific regional hosting. One executed data-processing schedule requires operator consent before transfers outside the EEA; exact regions, controller/processor boundaries and fees are deployment-specific.
Inferred
Multi-brand
YesThe Malta entity supports multiple active and white-label domains.
Verified
YesCore capability — operators run and manage multiple brands from one back office.
Verified
Outbound migration
YesOperator-licensed PAM includes commercially reasonable transition services, continued access and functionality for a mutually agreed run-off period of up to one year.
Verified
YesOne executed agreement provides orderly data transfer and up to six months of transition services; current standard scope and price are deal-specific.
Verified
Operator fit
Mid, EnterpriseNamed deployments and regulatory footprint are best suited to established regulated operators and larger tribal properties.
Inferred
Mid, EnterpriseAimed at regulated mid-market and enterprise operators; in-house product teams get maximum control, while dedicated development and managed implementation can cover capability gaps.
Inferred
Compare all public measuresRead EveryMatrix reviewRead Pragmatic Solutions review
Opaque ownership
Opaque. Corporate holding layers are visible, but ultimate beneficial shareholders remain confidential.
Red flag
Provider-operated B2C brands and Finnish grey-market scrutiny
Red flag
£1.3m UKGC settlement
Red flag
Indiana settlements and historical PAM control defects
Red flag
late New Jersey waiver correction
Red flag
four-year initial term, automatic two-year renewals, 180-day notice, early-termination exposure and paid transition
Red flag
redacted price and liability amounts.

Team & public presence

Founders

MW
1 key people
Max WrightFounder2012

Leadership

MWPGEBPAJPSSMR
7 key people
Max WrightFounder
Phil GelvanCEO
Ed BullockCOO
Paul ArnoldChief Legal and Compliance Officer
Justin PsailaCFO
Steve SowerbyCTO
Mary RyanChief People Officer

Footprint & contact

Websitehttps://www.whitehatgaming.comwhitehatstudios.com belongs to the separately structured content business under an agreed sale to Merkur, not to the White Hat Gaming PAM.Primary domainswhitehatgaming.comwhitehatstudios.comThis is the UKGC head-office address; the Malta registered/site-terms address is 85 St John Street, Valletta, VLT 1165.HQ full addressCornerstone Business Centre, Mosta, MST 1180, MaltaOffices count5LinkedIn URLhttps://www.linkedin.com/company/white-hat-gamingAs of July 2026.LinkedIn followers16,595LinkedIn is the primary corporate social channel.Social channelsLinkedInAn active news and insights section is available; there is no separate academy.Blog or academyYesWhite Hat Gaming and White Hat Studios maintain an active industry-event presence.Conferences attendedICESBC SummitG2EWhite Hat participates regularly but is not among the largest exhibitors.Event presence scaleMediumThe latest visible post in White Hat Gaming's corporate newsroom is dated 2 October 2024.Press release cadenceDormant on the corporate newsroom since October 2024; current signals appear through partners and regulatorsSales contact publicFormDemo request methodSales formVegas Club Casino has been live in New Jersey on White Hat PAM since June 2026 under an exclusive G2 Digital partnership. Jackpocket, Bally's and Choctaw are named PAM clients. Potawatomi and Desert Diamond remain agreements without established go-live evidence. VIP Play/ZenSports is historical after its 2026 wagering wind-down.Named clients publicBally's/Bally BetG2 Digital/Vegas Club CasinoJackpocketChoctaw NationPotawatomi Casino HotelDesert Diamond Casinos/Bet Desert DiamondChristchurch CasinoVegas Club launched in New Jersey in June 2026 with White Hat PAM. Jackpocket is also an established PAM client. VIP Play/ZenSports remains a historical implementation after the operator began winding down wagering in 2026.Notable clientsBally's/Bally BetG2 Digital/Vegas Club CasinoJackpocketChoctaw NationPotawatomi Casino HotelDesert Diamond CasinosChristchurch CasinoVIP Play was implemented before the operator initiated a wagering wind-down in 2026. The three tribal entries remain signed agreements rather than established live launches.Public case studiesBally's Ohio PAM launch in 2023Bally Casino Rhode Island launch in 2024VIP Play Tennessee replatform in May 2025Choctaw, Potawatomi and Desert Diamond PAM agreements

Product portfolio

9
White Hat Gaming PAM & Back Office vendor screenshotwhitehatgaming.com ↗
PAM / modular platform

White Hat Gaming PAM & Back Office

The proprietary account, wallet and operational core covering player profiles, transaction and accounting systems, reporting, bonusing, game-content control and support tooling. Sportsbook, many CRM functions and third-party content remain separately supplied.

One February 2025 operator scope uses 99.7% monthly availability, service credits, 15-minute P1 response and defined maintenance and release controls; these terms are not necessarily universal.

Platform originProprietaryPAMYesArchitectureModularDeployment modelHybridOpen APIYesUptime SLA pct99.7%Release cadenceMultiple releases per month; one-month rolling release plan
Explore White Hat Gaming PAM & Back Office
Travelling Wallet™ vendor screenshotwhitehatgaming.com ↗
Cross-jurisdiction wallet

Travelling Wallet™

A single account carries cash, bonus and loyalty between supported products, apps and US jurisdictions while state ledgers, settlement and controls remain jurisdiction-aware.

Travelling Wallet provides automatic multi-state cash and bonus transfers, one registration, no app switch and full state-ledger tracking; this does not replace the operator's market licenses.

Wallet modelSingleWallet architectureTravelling Wallet with jurisdiction-specific ledgersUnified walletYesData residency optionsYesRegulatory reportingYes
Explore Travelling Wallet™
Front End & Native Apps vendor screenshotwhitehatgaming.com ↗
Frontend / API delivery

Front End & Native Apps

White Hat can design and support responsive web and native iOS/Android experiences, or let the operator or its third party own the frontend while White Hat supplies PAM APIs, documentation and integration support.

A paid frontend source-code license and copy provide a real build-operate-transfer path; this is not a no-code site builder or PAM source-code escrow.

Frontend builderNoCustom designYesResponsive designYesHeadless frontendYesNative appsiOS, AndroidOpen APIYes
Explore Front End & Native Apps
Casino Aggregation vendor screenshotwhitehatgaming.com ↗
Casino content aggregation

Casino Aggregation

The PAM connects third-party slots, live casino, tables, bingo, scratch and instant-win content with Back Office configuration, daily releases, jurisdictional controls and multi-brand lobby operations.

The current scope is 3,000+ games and 130+ providers, with daily releases and staged market-by-market controls.

Game aggregatorYesGames count3,000+Game studios130+Game typesSlots, Live casino, Table games, Bingo, Scratch and instant winLobby managementYesPer jurisdiction game toggleYes
Explore Casino Aggregation
In-House Cashier & Payments vendor screenshotwhitehatgaming.com ↗
Payments

In-House Cashier & Payments

A proprietary CSS-configurable drop-in cashier with payment redundancy, BIN and rescue routing, configurable limits, automated withdrawal rules and real-time risk alerts.

The cashier is a web UI that integrates into native apps. PCI DSS scope is SAQ A, not enterprise-wide PCI Level 1 certification.

Payment orchestrationYesCashier typeHosted-iframePayment routingYesPayout automationYesPCI compliant cashierYesCrypto supportNo
Explore In-House Cashier & Payments
Bonus, CRM & Gamification vendor screenshotwhitehatgaming.com ↗
Engagement / retention

Bonus, CRM & Gamification

White Hat owns the bonus and PAM event layers while Optimove, Salesforce Marketing Cloud, Xtremepush and Competition Labs provide much of the CRM, journey, predictive, recommendation and gamification depth.

AI recommendations, churn/LTV prediction, campaign generation and promotion decisioning are available through partners; none should be represented as a proprietary White Hat model stack.

Bonus engineYesCRMPartialSegmentationReal-timeGamificationYesLoyalty programYesAI ML depthPartner-led CRM/KYC plus an in-house behavioural safer-gambling algorithm
Explore Bonus, CRM & Gamification
Managed Operations & Compliance vendor screenshotwhitehatgaming.com ↗
Managed services

Managed Operations & Compliance

Optional managed customer support, payments and risk, compliance, complaints and ADR, responsible gambling, training, QA, CRM and operational support around the PAM.

Player support runs 24/7 across multiple channels in eight languages. B2B incident response uses 15-minute, two-hour and 24-hour tiers.

Managed servicesYesSupport level24/7Risk managementYesKYC AMLYesResponsible gamblingYes
Explore Managed Operations & Compliance
Partner Sportsbook Integration vendor screenshotwhitehatgaming.com ↗
Third-party sportsbook

Partner Sportsbook Integration

Sports betting can use the White Hat PAM, wallet, cashier, frontend and managed stack, while odds, trading, bet settlement and core sportsbook liability remain with an external supplier.

Kambi is the named fully integrated supplier on one deployment; substitute suppliers are permitted, and at least one current White Hat-hosted deployment uses Altenar.

SportsbookOptionalSportsbook originThird-partySportsbook modelThird-party-feedOdds feed providerKambi, AltenarTrading risk modelOutsourcedPokerOptional
Explore Partner Sportsbook Integration
White Hat Studios Amplify Suite vendor screenshotwhitehatstudios.com ↗
Affiliated content business

White Hat Studios Amplify Suite

The separate US-focused content branch groups Amplify Engage, progressive Jackpots, Bespoke games, Franchises and Omni-Channel distribution in one API-first suite; its sale to Merkur is agreed but not yet closed.

White Hat Gaming's PAM and white-label businesses are excluded from the transaction. Studios remains affiliated until regulatory approval and closing, then becomes an external supplier; its products must never inflate the PAM's native capability assessment.

In house game studioNoIn house gamesNoExclusive contentYesJackpotsNetworkJackpot networkNetworkRecent major launchesG2 Digital/Vegas Club Casino live in New Jersey from June 2026; VIP Play Tennessee replatform in May 2025; Potawatomi and Desert Diamond PAM agreements from 2025
Explore White Hat Studios Amplify Suite

What you can launch: deployment models

White-label

Third-party license wrapper

Turnkey

Your own licence & entity

Standalone

Operator-licensed PAM or modules

Platform foundation

6/7
Platform: ProprietaryArch: ModularDeploy: HybridWallet: SingleWallet arch: Travelling Wallet with jurisdiction-specific ledgersScale: Engineered and tested at five times current maximum volumeStack age: Modern

Travelling Wallet with state-aware ledgers and continuous cross-state player identity

PAMMulti currencyWhite Hat serves UK, Malta and North American brands, so fiat currency configuration is multi-market; the Travelling Wallet's US implementation is still state-ledgered in USD.Multi brandThe Malta entity supports multiple active and white-label domains.Multi domainHosting includedWhite Hat deploys, manages, monitors and operates the hosting stack. In one February 2025 contract, the customer bears hosting, Data Warehouse and AWS Outpost costs and may contract directly with the approved host.Data residency optionsThe customer can elect cloud or jurisdiction-local hub-and-spoke infrastructure subject to regulation, with dedicated or isolated multi-tenant deployment.Unified walletThe wallet spans casino and integrated sportsbook deployments and carries cash, bonus and loyalty, subject to jurisdictional segregation.Single sign onWhite Hat provides one Back Office; SAML, OIDC and federated operator login remain unresolved.

Analyst take · what you can really launch

White Hat has two distinct models. Provider-licensed UK/Malta white label places the B2C license, player liability and compliance role with White Hat Gaming Limited. Operator-licensed PAM makes the client responsible for its operating license and market access while White Hat maintains supplier approvals. VIP Play completed an already licensed replatform in about 13 weeks, while its West Virginia expansion stopped before launch because market access remained unresolved.

How the two models differ

Dimension
White LabelOffered

Third-party license wrapper

TurnkeyOffered

Your own licence & entity

Licence held by
Provider-sublicense
Operator, its own
Holds player funds
Provider
Contract-defined
Player ownership
Shared
Contract-defined
Player data access
Limited
Contract-defined
Brand migration / exit
Restricted
Yes
Time to launch
—
3 months
Commercial model
Hybrid
Hybrid
Setup fee
—
—
Ongoing
—
—
Customization
Contract-defined
Configurable
Source-code access
No
No
Operating scope
Contract-defined
Managed-option

marks the structural delivery boundary: which entity holds the operating licence.

White Label includes

Inherited markets: Great Britain, MaltaB2C support: OptionalOperating experience required: YesA regulated-market brand still needs approved ownership, compliance involvement and commercial capability even with White Hat managed operations.
Merchant accounts providedWhite Hat controls the cashier and payment relationships in a provider-licensed full-service structure; merchant arrangements remain partner- and contract-specific.Banking providedPayment orchestration and PSP access are available, but bank, acquirer, safeguarding and settlement structure remains contract-specific.WL compliance managedThe LCR function covers licensing, legal, compliance, complaints/ADR, player sustainability, training, QA, marketing approvals and affiliate compliance.Operates under provider entityYes for provider-licensed white label; No for B2B PAM. White Hat Gaming Limited can be the licensed B2C entity in UK/Malta structures. US, tribal and Ontario operators retain their own operating authority.

Turnkey includes

Package

PAMTravelling WalletCashierBack officeAPIsRegulatory reportingFrontend optionInitial training
License jur.: Great Britain, MaltaLicensing help: AdvisoryOperations: Managed-optionMerchant acc.: Provider-assists
Managed servicesManaged services are available, but scope and fees are agreed in a separate addendum.Company incorporation helpA corporate-formation service is not offered.Payment consultingWhite Hat optimises routing, payment limits, automated withdrawals and risk flows as part of managed payments.Multi project backofficeThe PAM and Travelling Wallet support multiple states with jurisdiction-specific ledgers and one administrative/reporting surface.Onboarding trainingInitial training, guides and recordings cover campaigns, reporting and integrations.

Managed-services responsibility comparison

Launch & onboarding reality

4/4
Realistic launchAbout three months for an already licensed replatform; longer for a new jurisdiction
Team: DedicatedMigration: About 13 weeks in one licensed-market replatformDocs: Client-gated API, service and training documentation; quality unresolvedOnboarding: Successful launch in one named reference
Competitor migration supportVIP Play retired ZenSports on 28 April 2025 and launched its White Hat-powered app on 12 May. Complete player-balance and account migration quality remains unresolved.Training providedInitial training, guides and recordings are contractually included.Go live supportThe Launch Plan, acceptance testing and incident framework cover go-live execution.Post launch optimizationPost-launch scope covers ongoing releases, maintenance, custom development, reporting and optional managed services.
Implementation and support comparisonLaunch evidenceFrontend and CMS comparisonLocalization comparison

Runtime & integration contract

Contractual availability, measured uptime, recovery objectives, failover and incident visibility are separate conclusions. A status page does not establish an SLA, and a security-incident record does not establish service availability.

API contract

Protocol surface

REST

The engineering stack uses REST APIs and endpoint contracts; the protocol mix across every external interface remains unresolved.

Editorial inference

Rate-limit boundary

Unresolved

Quota, throttling and burst policy remain unresolved.

Public API documentation

No

No self-serve developer portal exists. Customer-gated API documentation is supplied when reasonably needed.

Verified conclusion

Sandbox environment

Yes

One customer hosting schedule includes Development, Staging, Audit and Production environments. This is a contracted environment, not a self-serve sandbox.

Verified conclusion

Service level

Contractual uptime guarantee

99.7%

One February 2025 operator contract includes service credits. Measurement excludes accepted maintenance and a broad set of third-party, customer and exceptional events.

Verified conclusion

SLA service credits

Yes

Service credits apply below 99.7% monthly availability. The table is redacted, applies only to affected states/users and is the customer's sole availability remedy.

Verified conclusion

Measured uptime

Unresolved

No usable provider-wide historical uptime series exists.

Operating uptime record

One 2025 PAM contract warrants 99.7% monthly availability; historical portfolio-wide uptime is unresolved

The SLA excludes numerous third-party, customer, forecast-overrun and infrastructure events. Contractual availability is not the same as observed availability.

Verified conclusion

Recovery and failover

Backup frequency

Unresolved

Backup and recovery environments exist; backup frequency remains unresolved.

RPO / RTO

Unresolved

Numerical recovery point and recovery time targets remain unresolved.

Redundancy topology

Unresolved

Hub-and-spoke and a disaster-recovery Data Warehouse are verified, but active-active versus active-passive topology is not.

Multi-region failover

Unresolved

Disaster recovery is established; automatic multi-region failover is not.

Maintenance and incident visibility

Scheduled maintenance

Normally 5 days' notice, or 2 days for weekday 04:00–10:00 EST windows; maximum 3 hours per release

These are customer-specific 2025 SLA terms. Exceeding an agreed window by more than 60 minutes becomes an incident.

Verified conclusion

Public status page

No

No live provider-wide component dashboard or uptime history exists.

Verified conclusion

Security incident record

None

No White Hat cyber incident is established as of 2 August 2026. VIP Play's 2025 software defect affected its own internal systems and enabled unauthorized withdrawals through an external processor; it was not attributed to White Hat.

Editorial inference

Disaster recovery capability

Yes

The architecture includes a Data Warehouse intended to recover all requisite PAM-generated data after a disaster affecting the hosting facility or hardware platform. Backup frequency and RPO/RTO remain unresolved.

Verified conclusion

Product governance

Roadmap access, shipment cadence and formal customer input are shown as separate operating practices, not as a feature score.

Roadmap visibility

Directional only; feature work is planned roughly 4–6 months ahead

Product direction is established; a customer-visible delivery roadmap is not.

Supported conclusion

Release cadence

Multiple releases per month; one-month rolling release plan

One customer SLA sets a one-month rolling plan, normally at least two weeks' notice and regression, performance and QA testing before material production releases.

Verified conclusion

Customer advisory board

No

A formal customer advisory board and feature-voting programme are not established.

Editorial inference

API comparisonSLA and incident comparisonSecurity controls

Casino games, content & player experience

3,000+

games

130+

studios aggregated

Content mix

SlotsLive casinoTable gamesBingoScratch and instant win
New games: Daily operator releases; new supplier integrations typically 4–6 weeksAPI: White Hat Gaming casino aggregation

Analyst take · content depth

The PAM aggregates 3,000-plus games from 130-plus providers, enough for a regulated mainstream lobby but not exceptional breadth. Live casino and most games are third-party. White Hat Studios supplies differentiated US content and the Jackpot Royale networks, but it is a separate business under an agreed sale to Merkur. Until closing it remains affiliated; after closing its availability becomes a third-party commercial dependency. It is not an in-house PAM studio.

Content & aggregation

5/10
Studio: Third-party
Game aggregatorWhite Hat's PAM connects a multi-supplier casino catalogue through one platform relationship.In house gamesThe PAM company has no in-house game catalog. White Hat Studios is a separately structured supplier under an agreed sale to Merkur, pending regulatory approval.Exclusive contentOperator-branded and exclusive titles can come through White Hat Studios, but they are not produced by the PAM entity. Availability after the pending Merkur acquisition will depend on the supplier relationship.Rng certificationAggregated suppliers certify their games; White Hat Studios certifies its own content per regulated market.Provably fairThe portfolio uses regulated RNG certification, not a blockchain/provably-fair model.Tournaments toolReal-time tournaments, challenges and missions are delivered through the Competition Labs integration.JackpotsWhite Hat Studios supplies Jackpot Royale and Jackpot Royale Express network products and is under an agreed sale to Merkur; Competition Labs separately supports jackpots inside PAM engagement tooling.Jackpot networkJackpot Royale belongs to White Hat Studios, the separate content branch under an agreed sale to Merkur. It is not a pooled jackpot native to the White Hat Gaming PAM.Game recommendation AIAvailable through integrated Optimove tooling, which personalises lobbies and game picks. White Hat has not established a proprietary recommendation model.Demo modeFun/demo modes are available for eligible supplier games, subject to market and operator policy.

Live casino

3/6
Model: Third-partyRoulette, Blackjack, Baccarat, Game shows

Studio partners

EvolutionEzugiPragmatic Play
Dedicated branded tablesDedicated or branded live tables can be sourced from upstream live-casino suppliers; White Hat does not run the studio.Native speaking dealersGame showsGame-show titles are available through third-party live suppliers.Custom studio environmentVia-providers. Any dedicated studio environment is contracted with the live supplier, not built by White Hat Gaming.Live side betsLive low latency

Game management & merchandising

10/12
Lobby managementGame lobbies are maintained and optimized across multiple client brands.Game merchandisingGame merchandising includes daily content releases and multi-brand lobby optimization.Game categorizationOperations include configuring games and supplier settings and maintaining market-specific portfolios.Featured recommended engineManual merchandising is native and AI-ranked game picks can be delivered through integrated Optimove tooling. This is partner-led.Per game configGame and supplier configuration is available in the Back Office.RTP variant controlRTP variants exist only where the upstream supplier certifies multiple versions and the market permits selection.Per jurisdiction game toggleWhite Hat maintains game availability by regulated market and coordinates approvals, launches, updates and removals by jurisdiction.Game performance analyticsThe reporting stack tracks game revenue and activity; the exact metric set remains unresolved.New game schedulingPlanned daily releases and launches run through change management.Lobby ab testingSplit testing applies to CRM journeys, not casino-lobby layouts.Free rounds bonus buy controlPartial. The bonus engine supports free spins/free rounds. Bonus-buy availability and configuration belong to each game supplier and jurisdiction.Demo mode per marketGame eligibility, including fun mode, is controlled by local requirements and supplier certification.

Frontend & player experience

5/9
Native apps:iOSAndroid
Frontend builderA self-serve page builder is not included. The drop-in cashier can be styled with CSS, which is narrower than a frontend builder.Template libraryAn operator-selectable frontend template library is not established.Custom designOperator-licensed PAM can include a White Hat-built frontend based on the customer's UI, paid custom development and a frontend source-code license.Responsive designDelivery covers desktop and mobile-formatted sites plus native iOS and Android applications.PWAWeb-app packaging is implementation-specific; a standard PWA product is not established.SEO friendlyWhite Hat-operated domains are indexable; technical SEO guarantees remain unresolved.Headless frontendThe customer or an external third party can manage the frontend while White Hat supplies APIs, documentation and mobile-app integration.Ab testingSplit tests are available through integrated CRM/journey tools such as Xtremepush; this does not establish page-builder A/B testing.Social loginA standard social-login capability is not established for regulated player onboarding.Accessibility wcagWCAG level, accessibility audit and platform conformance are unresolved.

Analyst take · player experience

The strongest player-facing asset is continuity: one account carries cash, bonus and loyalty across supported products and US states while jurisdiction-specific ledgers and controls remain intact. The responsive cashier is configurable and the CRM stack supports triggered messaging. A self-serve frontend builder, standard native-app framework and lobby A/B testing are not established; headless frontend delivery is available through customer-managed or third-party frontends.

Beyond casino — verticals offered

SportsbookOptional
EsportsYes
Virtual sportsOptional
PokerOptional
LotteryNo
Bingo offeringYes
Telegram casinoNo
Retail omnichannelPartial

Sportsbook depth

7/7

100+

sports

Model: Third-party-feedFeed: Kambi, AltenarRisk: OutsourcedOrigin: Third-partyPoker net: Network
Inplay live bettingSupported on Kambi-powered deployments.Bet builderSupported by Kambi on relevant sports and jurisdictions.Cash outSupported by the integrated sportsbook where enabled.Live streamingOptional. Any match streaming is licensed and delivered by the sportsbook/operator or another media provider, not by the White Hat PAM.Esports bettingA capability of the integrated sportsbook partner.Virtual sports bettingAvailable via third-party sportsbook/content integrations.Margin overround controlPartner-managed. Commercial and risk settings sit in the sportsbook partner's managed-trading model rather than White Hat PAM.

Crypto & web3

0/5
Crypto-native: NoShare: Effectively none in the current regulated client set
Provably fair gamesOn chain settlementFiat onramp offrampThis field concerns crypto conversion rails; ordinary fiat cashier deposits and withdrawals are covered in the payments section.Crypto KYC optionalKYC/AML is a core requirement across White Hat's regulated markets.Web3 featuresCrypto AML toolsNo blockchain transaction product.
Lobby and content comparisonLive-casino supply chainSportsbook comparison

Running the business: operations, payments & growth

Payments & cashier

Cashier: Hosted-iframe

Method- and risk-dependent; no platform-wide SLA

payout speed

Rails

CardsE-walletsBank transferLocal methods

PSP partners

PXP Financial
Payment orchestrationThe proprietary cashier connects multiple payment gateways and supports BIN and alternative/rescue routing.Payment routingFeatures include BIN routing and rescue/alternative processing paths.Payout automationOperators can configure withdrawal rules and automated decisioning.Instant payoutsSpeed depends on the chosen PSP, method, risk checks and operator workflow rather than a universal instant-payout promise.Pay n playA standard Pay-N-Play registration/payment product is not offered.Open bankingA2A or open-banking methods can be supplied by selected PSPs; a native or universally included open-banking product is not established.PCI compliant cashierThe cashier has PCI DSS SAQ A scope; this is scoped validation, not enterprise-wide PCI Level 1 certification.Multi currency settlementMulti-market fiat operations imply multi-currency PSP settlement; currencies and merchant arrangements are deployment-specific.FX handlingWhite Hat supports multi-market fiat payments; a proprietary real-time FX or in-wallet conversion engine is not established.Chargeback toolsRisk/fraud managed services and cashier workflows support dispute handling; a separate chargeback module is not established.Crypto supportNo native crypto cashier, balance or settlement flow is in the current platform portfolio.

Payments and cashier comparison

Analyst take · running & growing on it

The operational core is substantial: PAM, cashier, customer-owned data, regulatory reporting, 99.7% contractual availability, 15-minute P1 response, release planning, training and optional managed services. Sportsbook, content, KYC, payments and engagement tools introduce separate suppliers, pass-through costs and SLA boundaries.

The run-the-business toolkit

Backoffice & controls

10/10
RBAC: Role-based; permission depth unresolvedBack-office: Single White Hat back office across states, brands and functions

KYC, AML and fraud controls

Multi user teamsThe platform supports distributed support, compliance, operations and engineering users.Bulk operationsThe bonus engine and CRM integrations execute segmented and automated campaigns at scale.Manual player adjustmentsControlled manual account and balance actions are supported; permissions and dual approval remain unresolved.Withdrawal approval workflowConfigurable withdrawal rules automate decisions and route exceptions into risk review.KYC case managementElectronic ID verification, AML workflows, Shufti document/biometric checks and managed compliance are integrated.Fraud case managementReal-time risk alerts and managed risk/fraud services support investigation workflows; detailed queues and rules remain unresolved.Realtime player viewThe back office provides full player history in real time across states and live contact monitoring.Support agent toolsThe managed-service back office supports player service, contact monitoring, reporting and quality assurance.Approval workflowsWithdrawal, marketing approval, compliance and escalation workflows are present; a generic no-code workflow builder is not established.Operator alertingReal-time risk alerts and customer-interaction triggers surface payment, player-protection and operational events.Admin audit trail

Back-office comparison

CRM, bonusing & comms

8/11
Segmentation: Real-time

Bonus types

Deposit bonusFree spinsCashbackLoyalty rewardsPrize draws
Bonus engineThe proprietary engine supports acquisition and retention across casino and integrated sportsbook.CRMWhite Hat provides the event, bonus and operational layer while Optimove, Salesforce Marketing Cloud, Xtremepush and other partners provide major CRM functionality.Marketing automationAutomated journeys and triggered campaigns run through integrated CRM tools.GamificationCompetition Labs supplies real-time tournaments, challenges, missions, jackpots and instant wins.Loyalty programThe Travelling Wallet carries loyalty balances; programme rules and tiers are configured by operator and partner tools.Free to play mini gamesCompetition Labs supports instant-win and engagement mechanics; a separate native free-to-play game studio is not established.AI retention toolsWhite Hat integrates Optimove and supplies real-time PAM events; predictive churn, LTV, reactivation and AI journey decisioning remain third-party and optional.Comms emailEmail delivery is integrated through CRM/messaging partners rather than a White Hat mail-transfer product.Comms smsNamed integrations include Mobivate and Text Local.Comms pushWeb push, alerts and popups are supported.Player message inboxThe engagement layer includes a web inbox and interactive popups.

CRM and retention comparison

Retention & VIP

5/9
Segmentation depth: Advanced
VIP managementVIP support and retention can be delivered within managed services; exact tier tooling is brand-specific.Loyalty tiersTiered journeys are available through integrated gamification/CRM tools, while the wallet tracks loyalty balances.Churn predictionAvailable through integrated CRM partners such as Optimove rather than a White Hat-owned predictive model.Reactivation toolsThe bonus engine and triggered CRM campaigns support win-back and reactivation.Personalization engineOffer personalization is delivered with integrated CRM tools; a proprietary game-recommendation model is not established.Mission quest systemMissions, challenges and tournaments come through Competition Labs.Managed retention serviceCRM, marketing and VIP operations can be included in managed services.Player journey analyticsReal-time events feed CRM journey tools, but a native White Hat journey-analytics product is not separately specified.Social community featuresNo social network, chat community or player-to-player layer is in the current product set.

Affiliate & agents

2/4

Affiliate models

Revenue share
Affiliate systemAffiliate operations are available as a managed white-label service, not as a built-in self-service PAM affiliate system.Affiliate trackingTracking and attribution are required for the managed affiliate programme; the technology vendor and dashboard scope are contract-specific and unresolved.Affiliate payoutsWhite Hat can administer affiliate operations and payment within managed white-label service.Agent systemA sub-agent or retail-agent hierarchy product is not offered.

Affiliate software comparison

AI toolkit

2/8
AI personalizationAI-labelled personalisation is available through CRM partners rather than a White Hat-owned model.AI recommendation engineOptimove can provide AI-ranked game and lobby recommendations over White Hat event data. The capability is partner-delivered and deployment-specific, not White Hat-native.AI churn LTV predictionPredictive churn, future value, reactivation and VIP likelihood are available through the integrated Optimove stack, not White Hat-owned models.AI fraud detectionShufti supplies AI-driven document authentication and facial verification; White Hat also has payment-risk rules and alerts. A proprietary White Hat fraud-ML model is not established.AI chatbotAn AI customer-support chatbot is not established.AI content generationOptimove includes generative campaign-content assistance; native or universally licensed PAM delivery is not established.AI dynamic bonusingWhite Hat's bonus engine can be orchestrated with partner AI promotion decisioning. Bonus execution is White Hat; AI selection is partner-led and deployment-specific.Dedicated AI leadershipAn executive or product role dedicated specifically to AI is not established.AI responsible gambling

AI and automation comparison

BI & reporting

6/7

Tracked metrics

GGRNGRDepositsWithdrawalsActive playersBonus costRisk
BI reportingThe single back office includes administration and reporting across brands and states.Real time reportingState ledgers, risk alerts and complete player history are available in real time.Custom dashboardsPartial. Standard reporting is present; self-serve dashboard building is not established.Data exportWhite Hat provides Kafka/Segment events, downloadable management reporting and no-charge export of all Customer Information at exit for operator-licensed PAM.Warehouse integrationThe architecture includes a Data Warehouse, and Kafka/Segment can feed downstream systems. Named Snowflake or BigQuery connectors remain unresolved.Cohort funnel analysisPartial. Integrated CRM tools perform journey and segment analysis; a separate native cohort module is not established.Realtime dashboardsReal-time risk, player and ledger data are established; the complete live-dashboard set remains unresolved.

Reporting and BI comparison

Markets, licensing & compliance: where you can go live

Licenses & certifications

Licenses

White Hat Gaming Limited: UKGC 052894-R-329546-008 and MGA/B2C/370/2017 Types 1, 2 and 3White Hat Gaming Limited: MGA Recognition Notice RN/026/2025WHT Limited: Alberta Platform Provider through 13 July 2027White Hat Gaming Inc.: exact supplier records for Michigan, Indiana, Pennsylvania and WisconsinWhite Hat Gaming Inc.: Pennsylvania iGaming and Sports Wagering Manufacturer through 21 July 2031White Hat Gaming Inc.: Wisconsin OIGRC 25-263 through 14 March 2027

Certifications

PCI DSS SAQ A cashier scopeannual SOC 2 Type II report and third-party PAM laboratory certification required by the February 2025 customer contract for an initial Tennessee and West Virginia scope
View exact legal-entity records and unresolved boundariesView product and assurance records
Audit: Annual security-program review and SOC 2 Type II work required in one customer scope; regulatory and technical review varies by market

Where you can go live

27

markets covered

About three months for an already licensed replatform; materially longer for a new jurisdiction

new market

Live regulated markets

Great BritainMaltaUnited States

Key regions

United StatesUnited KingdomNorth America

Market scope

Great BritainMaltaOntarioAlbertaPennsylvaniaMichiganIndianaIllinoisColoradoVirginiaArizonaNew JerseyTennesseeLouisianaConnecticutWyomingKansasMarylandOhioMassachusettsNew YorkPuerto RicoDelawareRhode IslandForest County PotawatomiWest VirginiaChoctaw NationWisconsin
US market accessYes
Latam readinessNo
Grey markets supportYes
Geo blockingYes
Multi jurisdiction complianceYes

Regulated markets ready

Great Britain, Malta, North America25 North American geographic markets represented by 27 approvals or registrations across 26 licensing authorities.

Exact market implementation record

Analyst take · licensing & compliance

White Hat has mature tooling and broad approvals but not a clean record: the £1.3m UKGC settlement, two Indiana supplier settlements, historical duplicate-account and self-exclusion logic failures, a late New Jersey transactional-waiver correction, a 2026 operator spending-limit defect and unresolved Finnish scrutiny all matter.

Compliance & risk

9/9
KYC: Shufti

Regulatory platform requirements

KYC AMLElectronic identity verification, AML controls and managed compliance are part of the platform/service.Risk managementWhite Hat offers real-time alerts plus optional managed risk and fraud operations.Fraud detection AIAI-assisted fraud prevention is available through the integrated Shufti identity and biometric stack. It is partner-delivered rather than White Hat-native.Transaction monitoringAge verificationRequired across White Hat's licensed and supplier-approved regulated deployments.Regulatory reportingJurisdiction-specific ledger accounts support accurate state reporting.Audit logsRegulated operations and end-to-end interaction traceability require durable records; exact admin-log coverage remains unresolved.Bonus abuse detectionThe bonus engine, withdrawal rules and risk monitoring support abuse controls; the exact rule set remains unresolved.Multi accounting detectionWhite Hat maintains duplicate-identity controls, but 2021 name-matching defects contributed to operator settlements.Device fingerprintingDocument and face verification are established, but device fingerprinting in the deployed PAM stack is unresolved.

Responsible gambling

2/3

RG tools

Deposit limitsTime limitsLoss limitsSelf-exclusionReality checksAutomated interventions

Responsible-gambling controls comparison

Responsible gamblingAffordability checksUK provider-licensed operations require financial-risk and source-of-funds controls; applicability and thresholds differ outside the UK.RG messagingRisk scores trigger interactive popups and can escalate to telephone intervention.Self exclusion registriesPlus applicable US and state registries.Harm markersExamples include chasing losses and erratic patterns; some signals run in real time.

Security posture

2/4
Certs: PCI DSS
Encryption in transitSensitive personal information transmitted wirelessly or across public networks must be encrypted, with encryption keys protected.Bug bounty programA bug-bounty programme is not established.Vuln disclosure policyA vulnerability-disclosure policy and dedicated security contact are not established.Breach notification processActual or suspected security incidents require written notice promptly and no later than 24 hours, followed by investigation, containment, remediation cooperation and a recurrence-reduction plan.DDoS protectionThe managed regulated service does not by itself establish a DDoS mitigation provider, capacity, covered endpoint scope or contract entitlement.WAFIndustry-standard firewalls, antivirus and malware controls are contractually required, but web-application-firewall coverage remains unresolved.Encryption at restAt-rest encryption algorithms, key custody and the exact platform, payment and personal-data scope remain unresolved.MFA operatorsPassword and access controls are contractually required; operator MFA scope and enforcement policy are unresolved.MFA playersPlayer MFA may be brand- or market-specific; a platform-wide White Hat capability is not established.Pen testing frequencyAnnual third-party security audits and annual SOC 2 Type II work are contractually referenced, but penetration-test cadence is not.

Localization

9/9
Languages: 8
Currency number formattingMulti-market regulated brands require local display formats; localization coverage remains unresolved.Local content curationOperators can select eligible titles from 3,000-plus games by market; curation is operational rather than an AI engine.Local payment railsMultiple gateways and methods can be configured by jurisdiction.Local support coverageManaged customer service operates 24/7 in eight languages with dedicated responsible-gambling and complaints/ADR functions.In country presenceThe group has five offices and regulated-market infrastructure or teams across Malta, the UK, South Africa and North America; the exact current office roster remains unresolved.Market specific T&CRequirements and controls change with the player's jurisdiction, and provider-licensed brands operate under local terms.Local odds formatsAvailable through integrated sportsbook partners such as Kambi, not the White Hat PAM itself.Regional game preferencesOperators curate content and promotions by jurisdiction and audience; an automated regional-preference model is not established.Tax reporting per marketOperator-licensed PAM includes operational, regulatory and state-revenue reporting, while Travelling Wallet maintains state-specific ledgers.RTL language supportRTL support is unresolved, with no established Arabic/Hebrew interface example or commitment.Local payment methodsOperator- and PSP-configured.Local language packsFront-end languages are brand-configured and managed support covers eight languages. Do not treat the support-language count as a fixed frontend-language count.

The real deal: pricing, contract & lock-in

contract-specific terms

Commercials

Quote only
Model: Hybrid enterprise contract: implementation, monthly maintenance, NGR-linked platform fee, minimum revenue guarantee, certification/licensing, hosting, custom development, managed services and third-party pass-through costsNegotiability: HighHidden fees: Certification and annual security audits, Licensing, AWS Outpost, hub and hosting, Third-party tools and content, Custom development, Frontend maintenance or purchase, Managed services, New-state work, Paid transitionTCO: Platform fee plus minimum guarantee, implementation, frontend maintenance, hosting/AWS, certifications, supplier licences, content/sportsbook, payments/KYC, custom development, managed services and exit costs
Min term: 4 yearsAuto-renewal: YesTermination: 180 days before term endExit penalty: YesExclusivity: YesChange-of-control: YesLiability cap: Mutual cap exists but formula and amount are redacted; indirect, consequential, lost-profit, lost-revenue and data-loss damages are broadly excluded, subject to carve-outsGoverning law: Delaware

Indemnification

Yes

The customer indemnifies White Hat for specified IP, end-user, regulatory, license and third-party-supplier liabilities. White Hat's counter-indemnity clause is redacted.

Verified conclusion

Commercial & contract terms disclosed18/27

Most terms here are negotiated privately and quoted on request, which is normal for the industry and exactly what an operator should pin down in writing before signing.

Analyst take · the real cost & the catch

The fee architecture is known but amounts are quote-only: budget for implementation, NGR-linked platform fees, a minimum guarantee, maintenance, AWS/hosting, certifications, licensing, supplier pass-throughs, custom work, managed services and paid transition.

Lock-in & exit — can you leave?

Data owner: OperatorExit cost: Customer-information export is free; normal fees continue during run-off and transition services are customer-paidExit notice: 180 days before term end; transition run-off up to 1 year
Player db portableOperator-licensed PAM includes no-charge export of all Customer Information in a mutually agreed file format after termination or expiry. This right does not automatically apply to provider-licensed white label.Transaction history exportTransaction Data is customer-owned and included in the contractual Customer Information export requirement.Realtime data streamingKafka and Segment carry a real-time player/event feed into integrated tools.Migration out supportOperator-licensed PAM includes commercially reasonable transition services, continued access and functionality for a mutually agreed run-off period of up to one year.Source code escrowCore-PAM escrow is not included. A customer may separately purchase a license and copy of the frontend source code; that does not transfer ownership of the PAM or its core.Vendor continuity clauseOperator-licensed PAM includes insolvency, force-majeure, data-return and up-to-one-year transition provisions. Change-of-control consequences are partly redacted.Schema stability policy

Support & account management

3/3
Support: 24/7Channels: Email, Slack, Live chat, Incident escalationSLA: P1: 15 minutes; P2: 2 hours; P3: 24 hours
Dedicated account managerEach party has a dedicated Delivery Manager; the standard post-launch staffing ratio remains unresolved.Technical account mgrPrime Contacts act as technical representatives alongside Delivery Managers; a universally titled TAM is not included.B2B supportB2B support includes platform support, maintenance, incident management, reporting, training and cooperation with customer suppliers.

Editorial & analyst notes

White Hat Gaming is one of the stronger independent PAM specialists for regulated US, tribal and UK operations. Its proprietary PAM, state-aware Travelling Wallet, cashier and managed-service depth are real. Operator-licensed PAM includes 99.7% availability, tiered response times, service credits, customer ownership of player and transaction data, free exit export and up to one year of transition support. The trade-offs are a four-year initial term, automatic two-year renewals, a 180-day notice window, paid run-off, broad SLA exclusions, redacted pricing and liability terms, partner-delivered sportsbook/content, provider-operated B2C brands and a non-clean regulatory record.

Strengths

  • Proprietary PAM and cashier
  • differentiated state-aware wallet
  • 25 named North American geographic markets through 26 licensing authorities
  • real UK white-label capability
  • 24/7 eight-language managed support
  • strong recent tribal wins.

Trade-offs

  • Redacted pricing and liability economics
  • four-year initial term with automatic renewal and paid transition
  • broad SLA exclusions
  • partner sportsbook/content/CRM
  • opaque UBOs and financials
  • provider-operated B2C conflict
  • material regulatory history and current Finland scrutiny.

Standout feature

Travelling Wallet: one account with cash, bonus and loyalty continuity plus state-specific ledgers, controls and reporting.

Biggest weakness

Commercial opacity remains in the numbers, not the entire framework: price amounts, the credit table, liability cap and key early-termination provisions are redacted, while actual uptime, RPO/RTO and API limits remain unresolved.

Best use case

A multi-jurisdiction US or tribal launch needing one PAM and wallet with White Hat-operated managed services, while the operator retains its own licence and market access.

Ideal operator

A well-capitalised regulated operator or tribal property that values PAM, wallet and managed operations more than owning every vertical in-house.

Crypto

No native crypto balance, custody, on-chain settlement, Web3 or provably-fair product; a historical client payment rail should not be treated as current platform capability.

Support

Managed player support runs 24/7 in eight languages. B2B support adds 15-minute P1, two-hour P2 and 24-hour P3 targets, plus credits below 99.7% availability; credit amounts are redacted and resolution deadlines are agreed per incident.

Migration

Operator-licensed PAM has a strong exit baseline: customer-owned data, free export in a mutually agreed format and paid transition/run-off for up to one year. White-label rights remain separate. Lock down export schema, run-off rates, surviving third-party commitments and the 180-day renewal deadline.

Dealbreakers

Need for crypto or prediction markets; mandatory established RPO/RTO, API limits or a current customer-inspectable security report; short termination-for-convenience contract; zero provider-operated B2C footprint; core-PAM source-code or on-premise ownership requirement.

White Hat Gaming FAQ

Is White Hat Studios part of the PAM?

No. It is a separate content business whose sale to Merkur was agreed on 15 July 2026, subject to approval; the PAM and white-label businesses are excluded.

Does White Hat give a US operator license?

No; it is a supplier and the operator keeps market access.

What is proprietary?

The PAM, Travelling Wallet and cashier are proprietary operating surfaces; sportsbook and game content remain separate product or partner layers.

Sportsbook?

Sportsbook is partner-delivered, including Kambi on named deployments. No proprietary White Hat sportsbook engine is established.

Crypto?

No native crypto product, wallet or settlement rail is established in the current PAM scope.

Appears inWhite-Label Casino ProvidersTurnkey iGaming Platform ProvidersStandalone / Self-Managed Casino PlatformsSportsbook Software ProvidersPlatforms Offering Live CasinoPAM (Player Account Management) ProvidersUS-Ready iGaming Platform ProvidersUK-Licensed iGaming Platform ProvidersEnterprise & Tier-1 iGaming Platforms

Facts checked August 2, 2026 · independent review, no pay-to-rank · hover ⓘ for value notes.

How we reviewEditorial recordCorrect or respond