There is a persistent misreading of how affiliate regulation works in Great Britain, and it costs operators money. The misreading is that affiliates are separately regulated parties who bear their own risk. They are not. Under Social Responsibility Code 1.1.2, the licensee is responsible for ensuring its affiliates comply — which means an affiliate breach is an operator breach.
The precedent is old and unambiguous. In March 2017 the Gambling Commission fined 888 Holdings £7.8 million over affiliate marketing violations spanning 2008 to 2016. The regulator did not pursue the affiliates. It pursued the operator for failing to control them.
If you run an affiliate programme touching the British market, here is what the 2026 rule set requires of you in practice.
Two changes took effect on 19 January 2026, and non-compliant affiliate pages describing your offers are your problem.
Mixed-product incentives are banned. A single incentive may not include more than one product type across betting, casino, bingo and lottery. Any affiliate page still running a "£20 free bet plus 50 free spins" headline is describing an offer you cannot lawfully make.
Wagering requirements are capped at 10x bonus funds. Every comparison table showing 30x, 40x or 60x on a live British offer is now wrong.
Action: audit every affiliate page that lists your offers. Rewrite cross-vertical headlines. Confirm the exact wagering multiple with your own compliance team before an affiliate publishes it, not after.
The operative standard is documentary. Your compliance officer must be able to produce audit logs showing review and approval for affiliate marketing carried out on your behalf.
Minimum viable structure:
A documented approval process before any affiliate campaign goes live
Performance and compliance audits at least quarterly
A formal escalation mechanism for prohibited marketing, commonly run as a three-strikes workflow moving from warning to suspension to termination
Dated records of every review, because "we have a policy" is not evidence and "we checked" without a log is not either
The content rules that catch affiliates most often:
False or misleading claims, with "guaranteed winnings" the classic example
Marketing that appeals to under-18s, or targets under-25s
Presenting gambling as a solution to financial difficulty
Omitting problem gambling messaging
Burying significant terms away from the offer they qualify
Enforcement here got sharper in mid-2026. CAP issued an enforcement notice on 4 June and launched a content-marketing sweep on 11 June using an AI-based Active Ad Monitoring System with social platform partnerships. Non-compliant ads must be amended or removed immediately, with referral to the hosting platform or the Gambling Commission if they are not.
Machine-speed detection changes the risk profile of a stale affiliate page. Content that sat unnoticed for two years is now findable in an afternoon.
Since 1 May 2025, SRCP 5.1.12 requires licensees to offer marketing opt-in on a per-product and per-channel basis. A blanket consent captured through an affiliate funnel does not satisfy this. If your affiliate is collecting a marketing permission, the granularity has to survive the handover.
Affiliates compete on specifics, and specifics are where misleading claims are born. Return-to-player figures, payout speeds and rebate percentages get repeated across dozens of pages, drift from their source, and end up as claims nobody can substantiate.
The defensible pattern is to publish verifiable mechanics rather than outcome promises. Table rules are checkable — a 3:2 payout on a natural and a dealer-stands-on-soft-17 rule are either in the game's info panel or they are not. Rebate mechanics are checkable if they are stated as a rate applied to a defined event. Operators structuring their propositions that way give affiliates something factual to write about: Duel Blackjack Live publishes its table rules and rakeback rate directly on its blackjack page, which is the format an affiliate can safely quote.
"Best odds anywhere" is the format that gets both of you an enforcement letter.
The direct liability chain runs from the affiliate's conduct to your licence, regardless of what your commercial agreement says about indemnities. Contractual protection may help you recover money afterwards. It does not prevent the breach, and the Commission does not accept it as a control.
Affiliate marketing remains one of the most efficient acquisition channels in this industry, and the regulatory structure makes it one of the least controllable. The operators who manage it well treat the affiliate programme as an extension of their own marketing function — reviewed, logged and audited on the same cycle — rather than as a network of third parties sending traffic.
That is more expensive than the alternative. It is considerably cheaper than £7.8 million.
18+. GambleAware.org.
