SBC News Voice of the Sports Betting Industry
Spillemyndigheden, the Danish Gambling Authority (DGA), has updated certification requirements for land-based gaming, online betting and online casino verticals, and has initiated a consultation with operators regarding the changes.
The changes have seen the requirement that incumbents must have three years of experience within a testing organisation removed due to it preventing certification work according to the certification programme.
Furthermore, to secure a gaming licence, operators must complete a PCI approved vulnerability scan, which should then be repeated every three months. The procedure can only be considered a valid quarterly vulnerability scan if it is completed in compliance with appropriate requirements.
Also, testing organisations in the Danish sector will no longer require an ISO accreditation to perform vulnerability checks and penetration testing as a result of the update, although firms must still maintain their status as an Approved Scanning Vendor in accordance with PCI DSS.
The DGA has added that 2022 is the target year for the completion of the update, although on specific final date has been identified.
An updated standard report will accompany the changes once they come into force, and several linguistic adjustments and alterations to guidance texts have also been made.
“Looking forward, the description of situations, where the DGA needs to give a prior approval of new and changed games, will only appear from the DGA’s technical requirements for online casino and betting, and not in the certification programme,” the regulator detailed on its website.
“A new version of the technical requirements will be issued along with the updated certification programme. The prior approval ensures that the licence holder can report correct and sufficient game data.
“New games, which do not fit in the existing data reporting requirements, can give rise to extensive system development on the DGA’s side, which is why information must be given to the DGA in plenty of time before launching the game.”
Initiating its consultation on the regulatory update, the DGA added that ‘interested parties are welcome to comment on the update before the final version is issued’, with 31 August 2021 set as the deadline for receipt of comments.
