Regulator Action Tracker

The pattern regulators keep naming: monitoring designed around amounts and samples, when the risk sits with the customer. A control that triggers on a threshold misses the customer who stays just under it; a risk-based one asks who the customer is and whether the money fits them.

The largest UK land-based casino case on this tracker, and the Commission said AML risk is "equally alive in the land-based sector". What good practice looks like: source-of-funds and source-of-wealth decisions taken centrally, risk ratings that move the same day a customer’s behaviour changes, and crypto treated as a source of funds to trace. Cash recycling and buy-in patterns are often seen first on camera and in table records; their value is in reaching the AML function as a structured, timed referral.

A small property, and a clear lesson in why settlement conditions are followed up: the Board came back to check, found the same controls missing and widened the review. Dual control on keys and the count room, with the access record kept as evidence, is the basic control that recurs here.

Nearly four years under a manager is the regulator saying remediation is measured in culture, not in policies written. The new element is "recent allegations": the review has moved from whether the old failures are fixed to whether new ones are occurring.

Two gaps that surveillance teams worked around now have their own offences: past-posting by withdrawal (until now pursued as theft) and recording gaming machines, which police had seen used to study machine play. Footage that shows the moment of withdrawal, or the recording device, now supports a charge under the Casino Control Act itself.

The fifth Strip property to settle over the same illegal-bookmaker network after MGM Grand, the Cosmopolitan, Resorts World and Caesars Palace. The training list is the finding: hosts, player development and anyone who can extend US$50,000 of credit, the people who knew the customer, not the compliance team that never heard. For a surveillance or AML function the record that matters is who knew what about source of funds, and when.

Source of funds and the timing of SARs again: the same two failures as the Nevada bookmaker cases, in an online operator. A SAR filed late is treated as a SAR failure, so the evidence that matters is the time between the first red flag and the report.

A false ID that passed 22 times across two properties, and a loyalty tier earned on it, is a door-control failure that the membership system then rewarded. Identity checks at entry are a surveillance and security control as much as a cage one, and the membership record is where the pattern was visible.

This is a licensing regime turning into a supervisory one. An on-site regulator office changes the compliance posture of a property completely: controls stop being something demonstrated at inspection and start being something observed continuously. For operators with Poipet exposure the practical question is no longer whether the licence is valid but whether the premises can survive an unannounced examination of who is actually operating inside them.

Recorded here because it changes what a Korean licence is. Under the current regime a licence has no fixed term, which is why term dates for Korean properties are unreliable on any register including ours. A five-year renewable licence would make renewal a periodic compliance event with an evidentiary burden attached: and a property whose AML and integrity records cannot survive a renewal review would be exposed on a cycle rather than never.

The lesson is the data link, not the count: most entries were caught and reported, some late, and the unreported ones came from identity-document changes. Good practice is to reconcile entry logs against the exclusion list after the fact as well as at the door, and to treat a change of identity document as a trigger for re-screening. The staff analysis used entry and dwell-time data operators already hold.

No penalty attaches to this, which is the point of including it: it is the notice that precedes penalties. A regulator that has just told the whole sector its CDD and transaction monitoring are inadequate has also told it what the next inspection will look for. The specific items named, from beneficial ownership to source of funds and source of wealth and sanctions and PEP screening, map onto the fields a due-diligence record is expected to carry, and a property that cannot produce a dated record of those checks is exposed regardless of whether the underlying customer was ever a problem.

The regional precedent of the quarter: accountability attaches to the officer who owned the risk, not the whole board. The defence is a contemporaneous record of what was flagged and what was done, reconstruction after the regulator asks is not a defence. AUSTRAC’s separate civil-penalty case (at least A$400m sought) remains the larger institutional exposure.

Three of the four matters pre-date the carded-play remediation; the financial-crime penalty is the structural one. The A$5m remediation fund signals the NICC wants technology fixes, not just fines.

The cleanest recent illustration of the implementation gap, an approved control that was not running as approved. Singapore now treats the gap between a designed control and a working one as the violation itself; configuration management and data-completeness assurance are becoming first-class compliance disciplines.

A multi-year structural transition completes. Concessionaires absorb only one former satellite (Casino L’Arc, by SJM); others either closed or were not picked up.

Cap is symbolic at this point, actual licensee count is now closer to one-third of the cap. The structural shift from junket-routed VIP to direct premium-mass and concessionaire-internal high-roller programmes is locked in.

Material upward shift in expected fines. Operators with chronic compliance gaps now face existential penalty exposure rather than the cost-of-doing-business levels of prior years.

Three Las Vegas Strip operators (Resorts World, MGM/Cosmopolitan, Wynn) agreed multi-million-dollar AML fines in a 70-day window in 2025. The NGCB has clearly moved from periodic enforcement to coordinated parallel actions. Macau and Singapore VIP-channel design teams should treat this enforcement window as the new operational baseline.

Closes a controversial chapter that had drawn attention to laundering, trafficking and tax evasion concerns. POGO operators were estimated to employ over 30,000 people in the Philippines at peak.

The Chau case is the operational baseline against which every junket compliance regime in Asia is now measured. The 18-year ceiling combined with the multi-billion-dollar restitution sends a structural deterrent signal that the 2022 gaming-law reform intended to project. Concessionaires that fail to internalise this signal, particularly those still routing through grey-zone agents, face the same exposure pipeline.

The shift from periodic inspection to continuous on-site presence is the most under-reported structural change of the 2022 reform. Surveillance teams now have direct regulator interface throughout each shift, the operational tempo of compliance has effectively doubled. Operators that staffed compliance for periodic audits are still adjusting.

Repeated AML breaches at the same operator across four consecutive financial years, and the November 2024 shortened licence renewal, together signal that Singapore's regulator has moved from compliance-as-checkbox to compliance-as-licence-condition. RWS 2.0 expansion plans depend on closing this pattern.

The e-sabong suspension and the January 2025 POGO termination together close the two most controversial revenue lines in PAGCOR's portfolio. The remaining licensed verticals (IRs and PIGOs) operate under materially tighter scrutiny as a result.