iGaming leaders faced a familiar three-front reality: growth is still there, but it’s getting harder to defend. On the commercial side, operators are leaning on iCasino-led performance, consolidation, and better analytics to protect margins and retention. In parallel, regulators are tightening the screws—especially around advertising, AML expectations, and the blurred line between prediction markets and licensed gambling. And on the security front, the week reinforced that extortion, exploited remote-support tooling, and “small” endpoint flaws can quickly turn into a high-impact incident for any operator with complex vendor and admin ecosystems.

Bonus at the end: YOUR CASINO’S WEAKEST LINK — Third-Party Vendor Breaches in iGaming (a quick, practical read on where vendor exposure tends to break first).

Trends & Analytics

1. Michigan online gambling up in January (iCasino offsets sportsbook softness).
   Overall online gambling revenue rose year-on-year, led by iGaming receipts (+20% YoY) even as online sports betting receipts fell sharply—useful signal for product-mix resilience in regulated states. (iGB)
   Source: iGaming Business — Michigan online gambling revenue up despite sports betting dip in January
2. Super Group (Betway/Spin) posts strong FY25 growth and resets 2026 targets.
   Revenue surged 22% in FY25, with management guiding to continued double-digit revenue and adjusted EBITDA growth—another datapoint that “multi-geo + brand” portfolios are compounding faster than single-market plays. (iGB)
   Source: iGaming Business — Super Group FY25 revenue surges 22% amid Africa growth and Botswana launch
3. Tabcorp’s turnaround narrative: modest top-line lift, focus on execution.
   Half-year results showed slight revenue improvement, but the more important read is operational: customer trends, digital engagement, and how “media + wagering” ecosystems are being rebuilt for margin stability. (iGB)
   Source: iGaming Business — Tabcorp turnaround plan ‘on track’ amid 1% H2 revenue growth
4. FDJ United pushes deeper internalization of its tech stack across markets.
   The strategic signal: owning more of sportsbook/casino/poker infrastructure is being treated as a control point for speed, risk, and economics—especially in multi-jurisdiction operations. (iGB)
   Source: iGaming Business — FDJ United accelerates internalised tech stack rollout across core markets
5. Unified analytics as a retention lever (and risk-management enabler).
   A practical operator trend: consolidation of player/product/supplier data into unified dashboards is increasingly positioned as “core ops,” not just marketing—shortening response time on churn, bonus cost, and fraud signals. (iGB)
   Source: iGaming Business — Why unified analytics are critical for player retention

Law & Regulation

1. Netherlands: KSA hits Polymarket with a penalty order for illegal operations.
   The regulator treated the product as gambling requiring a license, ordering cessation or escalating fines—another example of “prediction markets vs gambling frameworks” colliding in Europe. (iGB)
   Source: iGaming Business — Polymarket faces Dutch penalty over illegal operations
2. UK signals crackdown path on unlicensed gambling sponsorship in sport.
   Government messaging is moving toward closing sponsorship loopholes tied to unlicensed operators—an important watch item for brand/affiliate acquisition strategy in the UK. (GOV.UK)
   Source: UK Government — Government to crack down on gambling operator sport sponsorship
3. Philippines: national AML push targets “high-risk sectors,” including casinos.
   Marcos Jr’s directive underscores tighter compliance expectations and the ongoing importance of AML/CTF maturity for land-based + online-adjacent ecosystems in the region. (iGB)
   Source: iGaming Business — Philippines: Stronger anti-money laundering policy to target ‘high-risk sectors’ including casinos
4. Mexico: proposal to restrict gambling ads during primetime sports / before 10:30pm.
   Ahead of the 2026 World Cup spotlight, lawmakers are framing ad limits around child protection—operators should stress-test marketing funnels and media plans against tighter time-window rules. (iGB)
   Source: iGaming Business — Mexico eyes primetime gambling advertising ban to protect kids
5. Brazil: securities regulator clears first “official” prediction market (B3) under CVM oversight.
   By placing event trading under securities rules (not betting regulation), Brazil is creating a parallel track that could reshape how “sports-adjacent” products compete with sportsbooks. (iGB)
   Source: iGaming Business — Brazil approves first prediction market as financial securities

Hacks & Data Breaches

1. Wynn Resorts confirms employee-data breach.
   High-profile casino/hospitality brands remain prime extortion targets; employee PII exposure often becomes the easiest path to follow-on phishing, payroll fraud, and helpdesk takeover attempts. (Reuters)
   Source: Reuters — Wynn Resorts says hackers stole employee data
2. CISA warning: BeyondTrust Remote Support RCE now exploited in ransomware attacks.
   Remote-support tooling is a privileged choke point in iGaming ops; exploitation can cascade into rapid domain compromise if segmentation and credential hygiene aren’t tight. (BleepingComputer)
   Source: BleepingComputer — CISA: BeyondTrust RCE flaw now exploited in ransomware attacks
3. Windows Notepad Markdown-link RCE (CVE-2026-20841) technical breakdown.
   “Small” client-side issues still matter: internal file sharing (vendors, partners, operations) can become a low-friction malware path—especially for staff with access to CRM/risk/admin tooling. (zerodayinitiative.com)
   Source: Zero Day Initiative — CVE-2026-20841: Arbitrary Code Execution in Windows Notepad
4. Wynn/ShinyHunters extortion details and “deadline” dynamics.
   The playbook is familiar: public pressure + leak-site credibility + tight timelines—operators should assume extortion claims drive secondary attacks (credential stuffing, BEC, vendor impersonation). (The Register)
   Source: The Register — ShinyHunters demands $1.5M not to leak Wynn Resorts data
5. Ransomware ecosystem accelerates (Qilin dominance highlighted).
   A macro signal with direct iGaming implications: more active groups + faster victim growth increases the probability of “third-party blast radius” (affiliates, PSPs, KYC vendors, support tooling). (TechRadar)
   Source: TechRadar — Number of ransomware groups exploded in 2025… with Qilin dominating

Final Words

The 2026 advantage will go to operators who treat regulatory clarity and security readiness as revenue defense. This week’s signals are consistent: regulators are tightening around sponsorships, AML, and “prediction market” edge cases, while extortion campaigns keep targeting casino brands and the privileged tooling that runs day-to-day operations.

If you want a practical readout of where attackers can pivot in your environment—front-end & APIs, cashier/payment flows, KYC/CRM integrations, affiliate panels, admin access, and third-party/vendor exposure—ONSEC can help with iGaming-focused penetration testing and a risk-prioritized remediation plan your engineering team can execute quickly.

Bonus