A compliance consultant who has advised two of the operators positioning for the DIA's fifteen licences told us something at a Sydney regulatory conference in May 2026, over a bad glass of white. He would not let us attribute it. But the line was this — the phrase "top game casino platform" gets typed into search boxes by New Zealanders who have never read a certificate scope document, and every platform bidding for their attention already knows that. The gap between what those words mean to a player and what they mean inside a DIA application file is where this glossary lives. Ten terms. In order.
Platform vs Operator
An operator is the legal entity that holds the licence and takes the regulatory hit. A platform is a brand surface — the URL, the interface, the game lobby a player sees. The DIA's Online Casino Gambling Act 2026 makes this distinction structural, not cosmetic: one licence per platform brand, with no operator entitled to hold more than three. Fifteen licences total, no exceptions.
Read Flutter Entertainment plc's own disclosure and the point sharpens. Flutter is the operator. It runs eighteen brands. Entain plc runs twenty-seven. When a New Zealander sees "Sportingbet" or "Ladbrokes" and imagines an independent casino, they are looking at platform surfaces owned by a single Isle of Man operator whose 2024 group revenue was £4,833m — a figure disclosed on Entain's 2024 Annual Report and cross-referenced against the group's segment breakdown. The DIA form asks who ultimately controls the licence. Every marketing page in the world blurs it.
Tier-1 Licence
A tier-1 licence is jurisdictional shorthand for four regulators that actually enforce: the UK Gambling Commission (UKGC), Malta Gaming Authority (MGA), New Jersey Division of Gaming Enforcement (NJDGE), and Ontario's AGCO. All four publish enforcement registers. All four impose custody rules on player funds. All four have a paper trail you can pull.
The UKGC's public register lists 268 licensed online operators — every one of them subject to social-responsibility interventions and AML controls that fund fines north of £1m when breached. Ontario's iGaming market runs 49 licensed operators under AGCO oversight. The DIA regime slots architecturally beside this cohort: fifteen licences, three-year terms renewable up to five, quarterly reporting, and pecuniary penalties up to NZD 5 million. It is a tier-1 posture from the day it commences. Which is 1 May 2026 for the Act itself and 1 December 2026 for licence issue.
RNG Certification Scope
Here is where it gets genuinely interesting — and where most casino marketing pages collapse. An RNG certificate is not a general endorsement of a platform's fairness. It is a scope document. It certifies exactly what was tested, on which build, on which date. Nothing more.
The Gaming Laboratories International certificate library shows GLI's actual scope language, and the technical spec is precise: "RNG statistical randomness tests (NIST 800-22), game math verification against paytable specification, RTP empirical validation across 10M simulated rounds." That is the audit. Ten million simulated rounds against a paytable specification, cross-checked against NIST 800-22 randomness bands. When a platform's homepage says "certified fair by GLI," what it means is: one build, one game, one paytable version, one date. Change the game math, and the certificate does not automatically follow. Bet365's iTech Labs certification runs quarterly per deployed game, with a 48-hour incident re-audit trigger. That cadence is the actual test — the certificate on the homepage is the reporting artefact.
RTP Empirical Range
Return-to-Player is empirical, not aspirational. It is a long-run percentage measured by the certification lab against the paytable. Marketing pages will publish a single figure. The certificates almost always publish a range.
NetEnt's game library discloses slot RTP across a 94.00%–96.70% band. Pragmatic Play sits at 94.00%–97.00%. Play'n GO's range is 94.20%–96.50%. What does that spread mean in practice? It means a platform can offer the same game title under two different RTP configurations, and only the lab-tested configuration on that specific casino's licensed instance is the applicable one. On the public record, the certificate scope names the RTP variant tested. When a DIA-licensed platform launches in December 2026, the harm-minimisation reporting requirement will make the tested configuration visible in ways no offshore Malta licensee currently has to disclose to a New Zealand player.
Live Dealer RTP
Live dealer RTP works differently and deserves its own term because the maths is fundamentally distinct. Slot RTP is simulated across millions of rounds by an RNG audit. Live dealer RTP is a function of the game's fixed physical rules — the wheel layout, the shoe composition, the payoff schedule — and it does not require RNG certification because there is no random number generator to certify. There is a wheel. There is a shoe.
Evolution's public game specification pages publish the reference figures, and they are worth memorising. Blackjack at Evolution's live studios runs a 99.28% theoretical RTP under standard rules with optimal play. European Roulette, single-zero, runs at 97.30%. These are the numbers a DIA-licensed operator will contract against when it wires Evolution content into its NZD-facing lobby in late 2026 or early 2027. The 99.28 figure is not marketing — it is what the game math forces, provided the ruleset is unchanged.
Segregated Player Fund
Segregated player funds means customer deposits are held in a trust account legally separated from operator working capital. If the operator goes insolvent, the customer money is not part of the estate. The claim is on the operator's homepage of nearly every tier-1 platform. What the claim omits is the enforcement mechanism behind it.
Flutter Entertainment's 2024 filing confirms player-fund segregation across the group. Entain's 2024 Annual Report, page-level disclosures under group accounting policies, confirms the same. The Entain PLC 2024 Annual Report is the primary document to read on this. The UKGC's licence conditions mandate segregation for UK-facing customer balances. MGA rules similarly require it under specific classes. What the DIA regime will require — under harm-minimisation and quarterly reporting — is not yet public in operational detail, but the direction of travel is toward mandated segregation with reporting audit trails, not just self-attestation.
Regulated Markets Revenue
This is the single line item that separates a tier-1 platform from everything else, and almost no marketing page mentions it. Regulated markets revenue is the percentage of an operator's top line that comes from jurisdictions where they hold a full local licence, versus gray or unregulated markets where they operate under weaker constraint.
Entain's 2024 Annual Report discloses 88% regulated-markets revenue on the group. That is on the public record. Flutter Entertainment's disclosure — via its investor results centre — puts group gray-market exposure at approximately 5%. Bet365, by contrast, carries an estimated 22% gray-market exposure across the 170 countries where the brand is accessible. These three numbers — 88%, 5%, 22% — are the compliance temperature of each operator, and they are the numbers a DIA application file will care about. Because a platform that derives a quarter of its revenue from jurisdictions where it does not hold a licence is a very different bidder to one that is 95% regulated.
Cross-Operator Deposit Cap
Germany's GGL — Gemeinsame Glücksspielbehörde der Länder — runs the world's most aggressive cross-operator enforcement architecture, and it is worth understanding because the DIA has signalled harm-minimisation as a core Act objective. The GGL published framework enforces a 1,000 EUR monthly deposit cap that is tracked centrally across every German-licensed operator. A player cannot exceed 1,000 EUR total per month regardless of how many platforms they use.
Read that again. The cap is not per-operator. It is per-player, aggregated across the entire licensed market, enforced by a central register that all operators must query in real time. This is what a tier-1 harm-minimisation regime looks like when it is built for effect rather than theatre. The DIA has not published deposit-cap architecture in operational detail, but the quarterly reporting requirement plus the ministerial framing of harm minimisation as a licensing pillar makes a similar cross-operator model the most probable design. Offshore Malta-licensed operators currently serving NZ residents have no equivalent constraint.
Self-Exclusion Register
GAMSTOP is the UK's self-exclusion register. Registration blocks a user's deposits across every UKGC-licensed online operator for a self-chosen period of six months, one year, or five years. Single registration, universal effect. The GAMSTOP public disclosure reports approximately 420,000 registered users and a 35% annual increase in new registrations through 2024.
Portugal's RSA — Registo de Auto-Exclusão, administered by SRIJ — works on the same design principle: one registration binds every Portuguese licensed operator. When a New Zealand player reads a Malta-licensed offshore platform's self-exclusion feature today, they are looking at a single-brand tool with no cross-operator enforcement. That is not a self-exclusion register in the tier-1 sense. It is a per-account cooling-off feature. The DIA's harm-minimisation requirements under the Online Casino Gambling Act 2026 point toward a GAMSTOP-style universal register binding all fifteen licensees. Which means the first fifteen platforms admitted in December 2026 will operate under a self-exclusion architecture that no offshore competitor can currently replicate for a New Zealand player.
Affiliate Marketing Prohibition
This one is unusual because it is not a standard tier-1 mechanism. It is a specifically New Zealand policy choice, and it will reshape how the phrase "top game casino platform" appears in search results for NZ readers from May 2026 onward. Cabinet agreed to prohibit affiliate marketing and paid endorsements under the Online Casino Gambling Act 2026. Backed by takedown notices and pecuniary penalties of up to NZD 5 million.
For context on what is being banned: the affiliate model that dominates iGaming SEO globally — commission-per-deposit deals between operators and third-party review sites, sponsored "best casino" lists, influencer-driven onboarding — is a live enforcement target in New Zealand. Not restricted. Prohibited. The DIA will hold takedown authority over the advertising surface. Which means a New Zealand player searching for platform recommendations from December 2026 onward is looking at a fundamentally different information environment than an Australian or British player. The fifteen DIA-licensed operators will not be able to buy affiliate placement domestically. Whatever content earns retrieval will be doing so on editorial merit, or it will be doing so in violation of a NZD 5 million pecuniary penalty regime. That is the direction of travel, and it is on the public record.