Tabcorp's AU$350K MFA fine is a compliance template

This brief is supported by

What happened

Victoria's gambling regulator, the VGCCC (Victorian Gambling and Casino Control Commission), fined Tabcorp AU$350,000 (approximately US$246,000) for failing to implement mandatory multi-factor authentication (MFA) controls on player accounts. The fine is notable not just for its size but for its specificity: the regulator cited a named technical control, MFA, as the compliance failure. This moves enforcement from general "player protection" language into concrete, auditable technical requirements.

Why it matters

This is the kind of enforcement action that travels. Regulators in developing iGaming frameworks, including PAGCOR as it expands its online oversight program, actively monitor what established regulators enforce and how they document it. A fine tied to a specific technical standard gives other regulators a ready-made template: define the control, audit for it, fine for absence.

Free account

Read the rest of this brief

Why it matters, what it means for you, what to watch, and the discussion. Free with your work email, no approval wait. We bring you straight back here.

Get Signal free I have an account. Sign in

Sources: ASGAM

About the supporter of this brief

WOMO is a network of 4,000+ affiliates and micro-influencers across Southeast Asia, built by Digirockstars. It connects iGaming, fintech and tech brands with local partners who reach the players and users they want.

Visit WOMO →(opens in a new tab)

Related briefs

Fri, 25 Sept 2026Tabcorp's A$350K Fine Isn't the Real Cost, A$308K in Stolen Withdrawals IsVGCCC's fine is the smaller number. Real customers had accounts accessed without authorization, over A$308,000 withdrawn total, while this is Tabcorp's third regulatory fine in 2026 alone. The regulator's own language is sharper than any headline: VGCCC said it wasn't confident Tabcorp 'appreciates the substance and purpose' of the requirements at all. Here's why this sets a real precedent for PAGCOR's own expanding oversight program.iGaming
Wed, 23 Sept 2026Australia's BetStop Enforcement Pattern Is a Preview, and Operators Are Making the Same Two MistakesThis isn't one investigation, it's a sustained campaign, Buddybet, Ultrabet, Tabcorp, Ladbrokes, Dabble Sports, and more, fined over and over for the same two failures: not closing accounts and continuing to market to people who self-excluded. Parliament just passed legislation to raise the stakes further, effective January 1, 2027. The Philippines has no equivalent system yet, which makes this the moment to study the pattern, not repeat it.iGaming
Sun, 27 Sept 2026Stake's Curaçao licence questioned after document leakA leaked document raising questions about the validity of Ed Craven's Stake gambling licence is a significant compliance event for one of the most-used crypto-native gambling platforms in the APAC region. Curaçao licence legitimacy is already under heightened scrutiny following the jurisdiction's regulatory reform process, and a public challenge to Stake's specific licence status introduces player protection, payment processing, and affiliate relationship risk for any APAC operator or partner with commercial exposure to the platform.…Regulatory · Australia