News

Ukraine introduces new cybersecurity standards for gambling operators

Gambling and lottery systems are now subject to separate security profiles as PlayCity also moves to remove legacy KRAIL regulatory decisions.

· 2 min read
Share this article
Follow us on Google
AI Summary
Sign in to listen
playcity-consultation
Key Points
Gambling and lottery operators face new minimum information security requirements under Order No. 155
Gambling systems face additional requirements covering data localisation and the handling of player information
PlayCity has opened a 15-day consultation on proposals to invalidate legacy KRAIL decisions

Ukraine has introduced new cybersecurity requirements for gambling and lottery operators as the country continues to rebuild its regulatory framework under PlayCity.

Order No. 155, issued by the Ministry of Digital Transformation on 24 July, establishes separate security profiles for gambling and lottery systems. 

Operators are required to bring their information security arrangements into line with the minimum standards. The requirements cover areas including passwords, account verification, employee access rights, security audits, vulnerability testing and response periods for cybersecurity incidents.

The gambling profile also contains sector-specific controls. Gaming system data must be processed and stored at technical facilities within Ukraine, while separate requirements apply to the handling of player personal information and records connected with people whose access to gambling has been restricted.

The measures add a cybersecurity component to a regulatory overhaul that began with the replacement of the Commission for Regulation of Gambling and Lotteries (KRAIL). 

The Ukrainian Government began liquidating KRAIL in April 2025, transferring its regulatory functions to PlayCity.

PlayCity has since expanded licensing, enforcement and digital oversight. The regulator said in April that more than 3,500 illegal gambling websites had been blocked during the first year of the reform, while the State Online Monitoring System was being connected to licensed operators.

The transition away from KRAIL is also continuing at the legislative level. PlayCity has opened electronic consultations on a draft order that would invalidate certain previous KRAIL decisions to bring existing regulatory acts into line with Ukrainian legislation.

Comments on the proposal will be accepted for 15 days from publication, with PlayCity required to publish the consultation results no later than two weeks after decisions arising from the process are made.

The regulatory changes follow last week's transfer of PlayCity's Government coordination from the Digital Transformation Minister to the Prime Minister. The change came as Ukraine continued expanding its gambling monitoring and player protection framework.

Good to know

Ukraine's wider gambling reform also includes a national strategy addressing gambling addiction, with implementation objectives running through 2035

Reaction Board

News Analysis

View All
nyhandle

New York's record $2.8bn handle; a reminder of the power of sports betting...

As prediction market mayhem continues to captivate the courts across the US, New York's enormous $2.8bn October 2026 handle serves as a timely reminder of the power and popularity of 'traditional' betting modems that, contrary to the discourse, are far from out of fashion.

5 min read • • By Will Underwood
personalisation

Why gambling personalisation still isn’t personal enough

Personalisation has been championed within gambling for years – and AI has allowed for real improvements in this area. But, considering just how personalised gambling experiences could become, we're still not where we should be...

5 min read • • By Jack Found
Croker Analysis

What is Trevor Croker's legacy at Aristocrat?

After a decade at the helm, Trevor Croker is preparing to leave Aristocrat. What defined his tenure, and what will he leave behind?

4 min read • • By Marieta Lezaic

In The News

View All