S
Sudonex
Location

IgamingDevelopmentCompanyUsa

Igaming Development Company Usa — Sudonex iGaming development company. Custom builds, compliance, and scale.

GLI-19 / iTech ready
Modern stack
MGA / UKGC fluent
SC

Written by

Sudonex Compliance Desk

Compliance & Licensing

SE

Reviewed by

Sudonex Engineering Team

Senior Engineering

Published Updated Editorial standards
Author credentials & methodology

Sudonex Compliance Desk

AML/CFT certified · GLI/iTech liaison · UKGC LCCP-aligned reviewer

Sudonex's compliance desk advises operators on AML/CFT, responsible-gambling tooling, GLI-19 RNG submissions, and license-jurisdiction matchmaking. Cited in 17 client license filings.

Sudonex Engineering Team

GLI-19 audit experience · MGA technical reviewer · 12+ yrs in real-money game systems

The Sudonex engineering team has built licensed-grade casino, slot, and exchange platforms for operators across UKGC, MGA, AGCO, and Curacao. Specialties: matching engines, RNG certification, KYC/AML pipelines, and regulator-fluent architecture.

GLI-19 ready

RNG cert pipeline

MGA / UKGC

License-fluent

PCI DSS L1

Payment compliant

ISO 27001 aligned

Information security

An operator ready to launch a real-money online casino in New Jersey will have their platform development finished in five months. Their regulatory approval will take eighteen. That thirteen-month gap is the reality of building an iGaming business in the United States — and understanding it before you commission a development partner is the difference between a well-planned market entry and an expensive wait with a finished product sitting idle. This guide covers every decision that determines your US iGaming launch: real-money vs sweepstakes model, state-by-state regulatory timelines, pre-certified vs scratch builds, technical compliance requirements, and what to verify before you sign with any development studio.

Real-Money Casino vs Sweepstakes Model — The Decision Every US iGaming Operator Must Make First

The first decision in any US iGaming project is not which development company to hire — it is which operating model your platform will use. Real-money and sweepstakes platforms are not interchangeable paths to the same destination. They have different legal frameworks, different audiences, different technical architectures, and different cost and timeline profiles. Getting this wrong at the briefing stage costs months and significant capital.

Real-money online casino gaming is legal in seven US states as of early 2026: New Jersey, Pennsylvania, Michigan, West Virginia, Delaware, Connecticut, and Rhode Island. To operate in any of these states, you need a state-issued operator licence, certified software vendors approved by the relevant state gaming control board, and a platform built to that state's specific technical standards. The investment is substantial — advanced custom platforms run $300,000 to $1,000,000 or more, and development timelines of six to twelve months are standard before the regulatory queue even begins. Payment infrastructure is limited: credit cards face issuer-level blocks from most US banks, making ACH bank transfers, PayPal, and PayNearMe the primary deposit and withdrawal rails. Cryptocurrency is not accepted for real-money wagers in any of the currently regulated states.

Sweepstakes casinos operate under a different legal framework that allows them to reach players in approximately 45 states without a traditional gambling licence. The model works through a dual-currency system — Gold Coins for free play and Sweeps Coins for game entries where winnings are redeemable for prizes. A mandatory "no purchase necessary" alternate entry mechanism keeps the model outside the legal definition of gambling in most jurisdictions. The cost and timeline profile is materially different: white-label sweepstakes platforms run $50,000 to $150,000 with launch timelines of two to six weeks. Providers including NuxGame and SoftSwiss offer dedicated dual-currency engines built specifically for this model.

FactorReal-Money PlatformSweepstakes Platform
Legal states available7 (as of 2026)~45 states
Typical cost (white-label)$300,000–$1,000,000+$50,000–$150,000
Launch timeline6–12 months (plus regulatory queue)2–6 weeks
State licence requiredYes — each state separatelyNot required (most states)
Payment railsACH, PayPal, PayNearMeMore flexible including crypto
Currency modelUSDDual-currency (Gold/Sweeps Coins)
Regulatory riskEstablished frameworkEvolving — enforcement increasing

The sweepstakes model is not without regulatory risk. Michigan and Maine have taken enforcement actions against unlicensed or non-compliant sweepstakes platforms, and the regulatory environment in this space is actively shifting. Operators who choose the sweepstakes path should build legal review into their pre-launch process and monitor state-level guidance. How Pragmatic Play's US and global platform integration standards are structured illustrates how major content providers approach the compliance architecture that underpins both models.

The US State Regulatory Map — What Your Development Partner Must Already Know

The United States has no federal iGaming licence. Every state that permits real-money online casino operations maintains its own regulatory body, its own approved vendor registry, its own technical certification standards, and its own approval timeline. A software provider certified in New Jersey is not automatically authorised to operate in Pennsylvania. A game approved in Michigan needs a separate submission for Connecticut. This fragmentation is the defining characteristic of the US market, and your development partner's prior state-level experience is one of the most important selection criteria you have.

StateRegulatory BodyApproval TimelineKey Requirement
New JerseyNJ Division of Gaming Enforcement (DGE)Up to 18 monthsTransactional Waiver or Full Vendor Registration
PennsylvaniaPA Gaming Control Board (PGCB)4–8 monthsGLI/BMM platform certification
MichiganMI Gaming Control Board (MGCB)4–8 monthsIn-state data residency mandatory
West VirginiaWV Lottery6–12 monthsRNG certification required
DelawareDE Lottery4–8 monthsState-operated network integration
ConnecticutCT Department of Consumer Protection6–10 monthsTribal compact compliance
Rhode IslandRI Division of Lotteries4–8 monthsState-operated model

New Jersey's approval process is the longest and most demanding in the country. The DGE requires operators to navigate two distinct approval pathways: a Transactional Waiver, which allows limited operations pending full review, and Full Vendor Registration, which carries broader operational rights but requires extensive background investigation and documentation. The distinction matters for your development timeline — operators who enter the NJ process without understanding which approval level they need waste months on incorrect submissions.

Michigan and New Jersey both impose data residency requirements — all player data must be stored and processed on servers physically located within the state. This is not a compliance checkbox. It is an infrastructure architecture decision that must be specified at the development brief stage. Building a platform without in-state server architecture and then retrofitting it for Michigan compliance is an expensive and time-consuming correction. Your development partner must have prior experience delivering data residency-compliant infrastructure, not theoretical knowledge of the requirement.

Geofencing is mandatory across all regulated states. Every bet must be confirmed as originating from within the state's legal boundaries before it is accepted. This requires real-time IP geolocation, device GPS validation where available, and address verification against player registration data — all running simultaneously and invisibly during the wagering flow. A geofencing failure that allows an out-of-state bet to be accepted is a compliance violation with licence consequences. Gaming Laboratories International's US iGaming certification standards define the technical benchmarks your platform must meet for geofencing and RNG certification before any state approval can be granted.

Pre-Certified vs Build-From-Scratch — The Path That Actually Determines Your Launch Date

Here is the counterintuitive reality of US iGaming development: the development timeline is rarely what determines when you launch. The regulatory queue is. An operator can have a technically complete, fully tested platform ready to go and still wait twelve to eighteen months for New Jersey approval. Understanding this changes how you evaluate your development options.

Building from scratch gives you full architectural control, complete IP ownership, and the freedom to build differentiated features that no white-label platform offers. It is the correct choice for operators with a specific product vision, a defined market strategy, and the capital and patience to execute a genuine custom build. A basic custom setup runs $5,000 to $15,000 with a three-to-five-month development timeline. Advanced custom platforms with live betting, streaming, and full compliance infrastructure run $300,000 to $1,000,000 or more over six to twelve months. Then the regulatory clock starts.

White-label with a pre-certified provider is a fundamentally different proposition in the US market. Providers that already hold approved status in your target state — IGT, which maintains the widest US certification footprint across all seven regulated states, Aristocrat Interactive, EveryMatrix's Armadillo Studios in Miami, GiG (Gaming Innovation Group), and White Hat Gaming — bring existing regulatory standing to your project. When you partner with a pre-certified provider, you are not starting the regulatory clock from zero. You are entering the queue behind their existing approvals, which in many states means the path to launch is measured in months rather than years.

The SDLC Corp model illustrates a specific US advantage: engineering platform architecture specifically to pass NJ DGE, PA PGCB, and MI MGCB certification from day one, rather than building first and retrofitting for compliance after initial audit failures. First-time audit failures are common for custom builds that were not designed with state-specific technical standards in mind. Each failure adds weeks to the approval timeline and legal costs to the budget.

The decision framework: if your target state is New Jersey and your timeline is aggressive, a pre-certified white-label partner is almost certainly the correct choice for your first market entry. If your target state is Pennsylvania or Michigan, where timelines are shorter and the regulatory environment is more navigable, a custom build with a partner who has prior PA or MI approval experience is a viable path without the white-label compromise on differentiation. Build the regulatory timeline into your business plan before you brief a developer — not after. How Evolution Gaming structures its live casino and platform compliance architecture is a useful reference point for the integration standards major platform providers expect from their technology partners.

What US iGaming Development Actually Costs — A Component-Level Breakdown

Published cost ranges for US iGaming development ($10,000 to $1,000,000+) are accurate but useless without understanding what drives cost within that range. The US market has cost components that do not exist in other jurisdictions, and underestimating them is the most common budget error in first-time US market entry.

Cost ComponentWhite-LabelCustom Build
Platform development$50,000–$150,000 (sweepstakes) / $300,000–$1M+ (real-money)$5,000–$1,000,000+ depending on scope
State licensing fees$10,000–$150,000+ per stateSame
GLI/BMM certification$15,000–$50,000 per state$15,000–$50,000 per state
Legal/compliance vetting$20,000–$75,000 per state$30,000–$100,000+ per state
KYC/AML integrationTypically included$15,000–$40,000
Geofencing infrastructureTypically included$10,000–$30,000
Data residency (MI/NJ)Typically included$20,000–$60,000 infrastructure cost
Payment gateway (ACH/PayPal)Typically included$10,000–$25,000 integration
Ongoing compliance/audit$20,000–$50,000/year$30,000–$80,000/year

State licensing fees alone can exceed $150,000 in highly regulated markets before a single line of development code is written. GLI or BMM certification — the independent technical audit that most US states require before granting operator approval — costs $15,000 to $50,000 per state submission and must be repeated for each state you enter. An operator targeting New Jersey, Pennsylvania, and Michigan faces certification costs of $45,000 to $150,000 for those three states alone, before platform or legal costs.

Payment infrastructure deserves specific attention because US iGaming payment rails are unlike any other market. Credit cards are blocked by most major US bank issuers for gambling transactions — not by law, but by issuer policy — which means ACH bank transfers, PayPal, and PayNearMe are the operational reality for real-money deposits and withdrawals. Cryptocurrency is currently not accepted for real-money wagering in any licensed US state. Building payment infrastructure that handles these rails with the correct AML reporting obligations built in is a distinct development cost, not a standard feature. Understanding crypto payment risks and compliance considerations for iGaming operators provides relevant context for operators who want crypto capability on their roadmap without conflicting with their regulatory standing.

AI, Geofencing, and Data Residency — The Technical Requirements Most Developers Get Wrong

Three technical requirements distinguish US iGaming development from platform builds in other jurisdictions. Every development partner will tell you they can handle them. The right question is whether they have delivered them in a live, state-approved environment.

Geofencing is more complex than IP address lookup. A robust geofencing implementation combines IP geolocation, device GPS validation, Wi-Fi triangulation where available, and player registration address verification — all reconciled in real time before every wagering session begins. Players near state borders present the highest error rate for basic implementations. Players using VPNs require active detection and blocking. Players on mobile switching between cell towers and Wi-Fi require continuous session location validation, not just session-start verification. A developer who has delivered geofencing for a live NJ or PA operator has solved these edge cases in a production environment. A developer who has not has solved them only in theory.

Data residency is an infrastructure decision, not a software feature. Michigan and New Jersey require player data to be stored and processed on servers physically located within the state. This means your cloud architecture cannot simply deploy in the nearest AWS or Google Cloud region — it requires dedicated in-state infrastructure that meets the regulatory definition of data residency. AWS and Azure both offer region-specific deployments that satisfy these requirements, but they must be specified and costed at the architecture stage. A platform designed for global cloud deployment that is then asked to satisfy MI or NJ data residency requirements typically requires significant infrastructure re-architecture.

AI and automated compliance have moved from optional to expected in US iGaming development. Regulators require automated KYC verification, real-time AML transaction monitoring, session time limit enforcement, state-level self-exclusion list checking, and responsible gambling intervention triggers. These are not features an operator adds after launch — they are pre-launch certification requirements. Modern development platforms integrate ML-powered fraud detection, automated odds adjustment for sportsbook components, and player behaviour analysis for responsible gambling compliance. A development partner that delivers these as post-launch additions rather than pre-certification infrastructure creates compliance exposure at the most sensitive stage of your regulatory relationship.

Our iGaming terminology reference for operators new to the US market covers the full vocabulary of compliance requirements in plain language for operators who are navigating these specifications for the first time.

Choosing a US iGaming Development Partner — Questions to Ask Before You Sign

The US iGaming development market includes studios from Florida to Mumbai all claiming US compliance expertise. The questions that separate genuine US-market specialists from generalists claiming US experience are specific, verifiable, and not answered by a marketing brochure.

Which US states have you delivered live, approved platforms for, and can you provide reference contact details? This is the foundational question. A developer with a live, state-approved platform in New Jersey has navigated the NJ DGE approval process, passed GLI or BMM certification, satisfied geofencing and data residency requirements, and handled the post-approval compliance monitoring obligations. A developer who has not done this is learning on your budget.

What is your existing relationship with GLI and BMM, and what is your typical first-submission pass rate? Studios with strong relationships with the major US certification labs know what documentation, RNG architecture, and technical specifications labs require before submission. First-submission pass rates above 85% indicate a studio that understands lab requirements. Pass rates below that indicate a studio that is learning through failures — which extends your regulatory timeline.

Does your platform architecture satisfy MI and NJ data residency requirements from day one, and who is your in-state infrastructure provider? The answer should name a specific cloud provider and region configuration. A vague reference to "scalable cloud infrastructure" is not sufficient. If the developer cannot name their in-state AWS or Azure region configuration for Michigan, they have not solved this problem.

What KYC/AML provider do you integrate with, and is it on the approved vendor list for your target state? KYC and AML providers must themselves be approved by state gaming control boards in many jurisdictions. Using an unapproved provider — even a technically excellent one — can block your platform approval or require retrofitting after the fact.

What does your contract say about regulatory rejection remediation? If your platform fails GLI certification or state approval due to a technical deficiency in the developer's deliverable, who bears the cost of remediation and resubmission? This clause is absent from most studio contracts and becomes a six-figure dispute when a certification fails. Require it in writing before signing.

What is your post-approval compliance monitoring service model? US iGaming is not a build-and-hand-over engagement. State gaming control boards conduct ongoing audits of licensed platforms. Responsible gambling tools must be updated when state requirements change. AML thresholds adjust with regulatory guidance. A developer without a documented compliance maintenance service model is leaving you to manage ongoing regulatory obligations without their support after launch. How we evaluate platform compliance and software quality standards at Sudonex follows the same verification approach — you can review how we evaluate platform compliance and software quality standards for the methodology behind our assessments.

Frequently Asked Questions

Q: How much does it cost to build an iGaming platform in the US?

US iGaming platform costs range from $50,000–$150,000 for a white-label sweepstakes setup to $300,000–$1,000,000+ for a custom real-money platform. A basic custom build runs $5,000–$15,000 for an MVP with a three-to-five-month timeline. Beyond development, US-specific costs include state licensing fees ($10,000–$150,000+ per state), GLI/BMM certification ($15,000–$50,000 per state), legal compliance vetting ($20,000–$100,000+ per state), geofencing infrastructure, and in-state data residency infrastructure for Michigan and New Jersey. Total first-year entry costs for a single regulated state typically range from $200,000 to $500,000 when all compliance components are included.

Q: What is the difference between a real-money casino and a sweepstakes casino in the US?

A real-money online casino accepts direct USD wagers and is only legal in seven states as of 2026: New Jersey, Pennsylvania, Michigan, West Virginia, Delaware, Connecticut, and Rhode Island. It requires a state gambling licence and certified software vendors. A sweepstakes casino uses a dual-currency model — Gold Coins for free play and Sweeps Coins redeemable for prizes — operating under a legal framework that does not classify it as gambling in most states. Sweepstakes platforms can reach approximately 45 states without a gambling licence but must include a free alternate entry method. The sweepstakes model is faster and cheaper to launch but faces increasing regulatory scrutiny in some states.

Q: How long does it take to get an iGaming licence in the US?

US iGaming licensing timelines vary significantly by state. New Jersey is the longest at up to 18 months. Pennsylvania and Michigan typically run 4–8 months. West Virginia and Connecticut run 6–12 months. These timelines cover the regulatory approval process only — platform development happens in parallel but the regulatory queue, not software readiness, determines your actual launch date. Using a development partner with pre-certified technology in your target state can shorten the approval pathway because the technology component of the review is already satisfied.

Q: Which states allow real-money online casino gaming in 2026?

Seven states permit real-money online casino gaming in the US as of early 2026: New Jersey, Pennsylvania, Michigan, West Virginia, Delaware, Connecticut, and Rhode Island. Each state maintains its own regulatory body — the NJ Division of Gaming Enforcement, the PA Gaming Control Board, the MI Gaming Control Board — with distinct licensing requirements, approval timelines, and ongoing compliance obligations. A licence in one state does not transfer to another. Operators targeting multiple states must complete separate applications, certifications, and compliance frameworks for each.

Q: What is a GLI or BMM certification and do I need one?

GLI (Gaming Laboratories International) and BMM Testlabs are independent technical testing bodies that audit iGaming platforms for RNG integrity, game fairness, platform security, and responsible gambling feature compliance. Most US regulated states require platforms and software vendors to hold a GLI or BMM certification before they can receive state approval to operate. The certification audits the technical platform against the state's specific technical standards. Costs run $15,000–$50,000 per state submission. Studios with established relationships with these labs and strong first-submission pass rates deliver certification faster than studios without prior US certification experience.

Q: Can I launch a sweepstakes casino without a gambling licence in the US?

Yes — sweepstakes casinos operate under a promotional sweepstakes legal framework that does not require a traditional gambling licence in most US states. The model requires a dual-currency system with Gold Coins for free play and Sweeps Coins for game entries, plus a mandatory free alternate entry method so no purchase is necessary to participate. This structure keeps the platform outside the legal definition of gambling under most state laws. However, Michigan and Maine have recently taken enforcement actions against sweepstakes platforms that did not comply with specific state requirements. Legal review by counsel familiar with each target state's sweepstakes regulations is essential before launch.

Q: What is data residency and why do some US states require it?

Data residency is a regulatory requirement that all player data — account information, transaction records, session logs — must be stored and processed on servers physically located within the state. Michigan and New Jersey both impose data residency requirements as conditions of their iGaming licences. This affects your cloud infrastructure architecture: you cannot use a generic global cloud deployment and satisfy these requirements. You need dedicated in-state server infrastructure, typically delivered through region-specific deployments on AWS, Azure, or equivalent providers. Data residency must be specified at the development architecture stage — retrofitting a non-compliant platform after initial design is expensive and time-consuming.

Q: What payment methods work for US iGaming platforms?

Real-money US iGaming platforms operate primarily on ACH bank transfers, PayPal, and PayNearMe — not credit cards. Most major US banks impose issuer-level blocks on credit card transactions to gambling platforms, which is a bank policy choice rather than a legal prohibition. Cryptocurrency is not accepted for real-money wagering in any of the currently licensed US states. Sweepstakes platforms have more flexibility, and some sweepstakes operators accept crypto depending on their provider. Payment gateway integration must be built to handle AML reporting obligations for gambling transactions, which requires specific technical implementation beyond standard payment processing.

Q: What does a white-label iGaming solution include for US operators?

A white-label iGaming solution for US operators typically includes the core platform architecture, game aggregation from certified content providers, KYC/AML compliance modules, state-mandated responsible gambling tools (deposit limits, self-exclusion, session time limits), payment gateway integration for ACH and e-wallet rails, and geofencing infrastructure. For US-focused providers, it may also include sublicensing under the provider's existing state approvals, which accelerates regulatory approval, and managed data residency infrastructure for Michigan and New Jersey. The scope varies significantly by provider — confirm in writing which compliance components are included and which are billed separately.

Q: How do I choose between building a custom iGaming platform and using a white-label solution in the US?

The right choice depends on three factors: timeline, budget, and target market. If you are entering New Jersey for the first time with a budget under $500,000 and a 24-month window, a white-label solution with a pre-certified provider is almost certainly correct — it gives you the fastest regulatory pathway and the lowest development risk. If you have a specific product differentiation strategy, a multi-state rollout plan, a budget above $500,000, and patience for a custom regulatory approval process, a custom build with a US-experienced studio gives you full IP ownership and architectural control. Never choose based on the development cost alone — the regulatory queue, not the development timeline, determines your actual launch date.

Sources & References

  • New Jersey Division of Gaming Enforcement — nj.gov/oag/ge — NJ approval timelines, Transactional Waiver vs Full Vendor Registration pathways, and data residency requirements cited throughout
  • Pennsylvania Gaming Control Board — gamingcontrolboard.pa.gov — PA licensing timelines and GLI certification requirements cited in regulatory map section
  • Michigan Gaming Control Board — michigan.gov/mgcb — MI data residency requirements and approval timelines cited in regulatory map and technical requirements sections
  • Gaming Laboratories International — gaminglabs.com — GLI certification standards and RNG audit requirements cited in regulatory and FAQ sections
  • Federal Reserve / US banking policy — federalreserve.gov — Credit card issuer-level blocks on gambling transactions cited in payment methods section

FAQ

Frequently Asked Questions

See the relevant section above for the detailed answer; reach out to Sudonex for specifics about your build.

Free 30-min discovery

Ready to build something operators trust?

Tell us about your build — region, licensing, timeline, budget. We'll come back with a technical scope and a fixed-bid roadmap within 48 hours.