Arden Consult cautions Philippine online gaming operators on ID checks only at withdrawals, restricted persons database grows significantly

Dig Deeper

The Backstory

Exclusion rules move from policy to systems test

The warning from Arden Consult lands at a point when the Philippine online gambling market is no longer being judged only by growth, tax take or channelization. It is increasingly being judged by whether licensed operators can prove that their controls work before harm occurs. The National Database of Restricted Persons, or NDRP, has become a central test of that shift.

The scale of the database has changed the compliance calculation. Arden said active exclusion records added to the NDRP had risen to 40,551 as of Oct. 31 from 2,676 a year earlier. The list includes self-exclusions, family exclusions and exclusions initiated by licensees, alongside categories of people barred by law or regulation, including government personnel and licensed casino staff in certain circumstances. For online platforms, the practical effect is clear: a barred player is not barred from one venue or one product. The exclusion follows the player across the licensed market.

That makes identity verification timing critical. If an operator screens fully only when a player seeks to withdraw, rather than before or at account activation, the platform may already have accepted deposits and permitted play from someone it was required to reject. Arden’s concern reflects a broader regulatory direction: Philippine Amusement and Gaming Corp. rules are being treated less as paperwork and more as operational architecture.

A market built first, then tightened

The pressure on NDRP compliance follows a sequence of policy choices that reshaped the licensed online sector. PAGCOR first made legality more commercially viable by cutting electronic-gaming license fees from more than 50% of gaming revenue to 35% in April 2024 and then to 30% in January 2025. The goal was to pull operators and players away from illegal offshore sites and into a supervised market.

That phase worked well enough to change the conversation. Licensed electronic gaming gross gaming revenue reached Php114.83 billion in the first half of 2025, making it the largest component of Philippine gaming revenue. But as Arden later argued in a white paper on the first-half revenue decline, the next stage was not about preserving every license or maximizing headline revenue. It was about deciding what standards operators must meet once they were inside the regulated system.

Those standards have become more demanding. PAGCOR tightened advertising rules, required stronger player verification, moved to accredit the business-to-business supply chain and pursued illegal sites and payment channels. The regulator also introduced a Minimum Guaranteed Fee, which made passive or undercapitalized licenses harder to sustain. Arden described the first-half 2026 decline in eGames, eBingo and bingo grantee revenue as part of that regulatory reset rather than evidence of market failure.

The exclusion database fits that same trajectory. Once the legal market has scale, the regulator can demand that operators use that scale responsibly. A platform that cannot synchronize with a daily changing exclusion list or identify barred players before accepting wagers undermines the central argument for licensing: that regulated gambling can see, restrict and intervene where illegal gambling cannot.

Compliance value rises as license speculation fades

The NDRP warning also intersects with a consolidation cycle in Philippine iGaming. A moratorium on new Gaming System Administrator applications since March 2024 and the Minimum Guaranteed Fee have increased the appeal of acquiring existing PAGCOR-accredited companies. But Arden has cautioned that buying a licensed operator is not the same as buying an unrestricted right to conduct gaming.

In a recent guide, Arden said a wave of “PAGCOR license for sale” offers had emerged, but warned investors that accredited iGaming companies carry regulatory history and continuing obligations. A buyer inherits potential exposure tied to unpaid fees, penalties, player-fund liabilities, tax issues, anti-money laundering compliance, promotions and contracts with unaccredited suppliers. A change in ownership or control requires PAGCOR board approval, and the license holder remains responsible for player accounts, reporting, gaming funds and compliance.

That logic raises the value of strong exclusion controls in any transaction. An operator that has treated verification as a back-end withdrawal function could carry hidden liabilities. If barred players were allowed to deposit, wager or win, the buyer may be acquiring not only a customer base and platform but also possible forfeitures, fines and remediation costs. In a market where more than 60% of licensed GSAs were below minimum-revenue benchmarks on second-quarter 2026 run rates, weak compliance may further depress asset values.

The result is a different kind of due diligence. Investors must examine whether an operator has proper API connectivity to the NDRP, match logic that handles name and identity variations, audit trails showing when checks occurred, internal access controls and documented procedures for disputed matches. In the new market structure, compliance systems are not ancillary to the asset. They are part of the asset.

Advertising debate underscores the stakes

The exclusion issue also sits within a larger policy fight over how the Philippines should control online gambling harm without driving players back to illegal operators. Senate Bill No. 2347, the Gambling Advertising Prohibition Act, would impose a sweeping ban on gambling advertising and sponsorship across media, websites, apps and social platforms, while allowing licensed operators to advertise only inside their own premises and on their own digital properties.

Arden partner Marie Antonette Quiogue has argued that such a ban could reverse gains made through channelization. In a special analysis of gambling advertising bans and evidence from five countries, she wrote that Italy, Belgium, France, the Netherlands and the United Kingdom show a consistent pattern: markets that silence licensed operators often give illegal operators more room, while tightly regulated advertising can help players distinguish lawful sites from unlawful ones.

That argument matters for exclusions because responsible-gaming protections reach only the licensed market. PAGCOR-regulated platforms must verify age and identity, honor self-exclusion and family exclusion, display responsible-gaming messages and respond to regulator-supervised complaints. Illegal sites do none of that. They do not consult the NDRP, respect family petitions or refuse government personnel barred from gambling. If policy choices push players out of licensed channels, the exclusion system loses practical reach.

The same analysis noted that advertising can serve as a public-education tool when it includes license numbers, helpline information and directions to official verification portals. That does not diminish the need for strict content and placement rules. It does, however, connect market visibility to player protection. If the public cannot identify licensed operators, vulnerable players may be more likely to enter environments where no exclusion list is enforced.

International cases show regulators expect automation

The Philippines is not alone in treating self-exclusion breaches as a serious systems failure. Australia’s BetStop regime offers a useful comparison because it imposes direct duties on wagering providers once a person joins the national register. Operators must close accounts and stop marketing to those individuals.

Recent Australian enforcement shows how regulators assess these failures. The Australian Communications and Media Authority warned four betting companies over self-exclusion breaches after finding that operators had sent marketing material to self-excluded people and, in one case, failed to close accounts. The agency also fined PointsBet AU$500,000 for failing to exclude people registered with BetStop.

In a separate case, Betchoice Corp., trading as Unibet, was fined more than AU$1 million for breaches of Australian self-exclusion rules. The regulator found that Unibet failed to close accounts for 954 customers on the register, with some accounts remaining open for 190 days or more. Even though no bets were placed during the self-exclusion period, the failure to close accounts promptly was treated as significant.

Those cases point to a standard Philippine operators should assume will apply locally: regulators expect automated, timely and auditable compliance. Good intentions or manual review after the fact are unlikely to be enough when databases are national, digital and mandatory. Once PAGCOR provides an API and the list changes daily, the burden shifts to operators to prove their systems can keep pace.

The next fault line is usability versus control

PAGCOR’s challenge is calibration. Stronger exclusion enforcement, identity checks and supply-chain accreditation are essential to distinguish the licensed market from illegal competitors. But if compliance is implemented in a way that makes legal platforms materially harder to use than offshore sites, channelization can weaken.

Arden has repeatedly framed that balance as the central issue for the next phase of Philippine online gaming. Higher standards should remove weak operators, discourage passive license holders and force investment in technology, cybersecurity, responsible gaming and governance. At the same time, enforcement against illegal sites and illicit payment channels must keep pace so compliant companies are not left carrying costs that their unlicensed rivals avoid.

The NDRP expansion brings that tension into focus. A robust exclusion system is one of the strongest arguments for a licensed market because it gives individuals and families a legal mechanism to stop gambling access. But the mechanism works only if operators check at the right point, act on matches and keep data secure. For PAGCOR, the issue is no longer whether exclusion rules exist. It is whether the industry has built systems capable of enforcing them at market scale.