How Kahnawake, Isle of Man and Alderney licences work

The Kahnawake Gaming Commission (KGC), Isle of Man Gambling Supervision Commission (IOM GSC) and Alderney Gambling Control Commission (AGCC) are three mature jurisdictions with their own models of online operator supervision and licensing. They differ in terms and technical requirements, but agree on the main thing: checking owners and key managers, controlling platforms and games, protecting players and funds. Below is how it works in practice.

1) Kahnawake Gaming Commission (KGC), Canada

Licensing Model and Roles

Licenses/Permits:

Interactive Gaming License (IGL) is a basic permission issued to an authorized host provider in a jurisdiction.
Client Provider Authorization (CPA) - "operator" permission for a brand playing a game with a consumer (B2C).
Key Person License - licenses for key managers (responsible for compliance/operations/marketing, etc.).
Who can: both independent operators (own brand) and B2B platforms under authorization.

Hosting and infrastructure

Historically, KGC required the placement of critical infrastructure at an approved data center in the Mohawk Kahnawawke Territory (often through a specialized provider). Hybrid schemes are now allowed, but control over hosting and audit of environments remains in the focus of the regulator.

Player protection and compliance

Verification of owners/beneficiaries, due diligence, AML/CTF compliance.

Requirements for game integrity (RNG/game content certification) and transparency of terms and conditions.

Separation of client funds and rules for returns/complaints, local dispute mediation procedures.

When KGC is selected

Often - for. com markets and flexible exit with moderate timing. The strong point is infrastructure expertise and work with data centers, plus well-functioning authorization processes.

2) Isle of Man Gambling Supervision Commission (IOM GSC), Isle of Man

Licensing model

The basis is OGRA (Online Gambling Regulation Act).

Permission types (simplified):

Full Online Gaming License (B2C) - for a brand working with a player (registration, acceptance of bets, payments).
Network Services License (B2B) - for platforms/network services (game hosting, pools, aggregators).
Software Supplier/Registration - scheme for software/content providers.
Key persons: responsible persons are appointed (compliance, AML, finance), competencies are confirmed.

Technical requirements and hosting

Onshore hosting on the island is possible (plus reliability, DR plans, audit), as well as recognized remote hosting schemes, subject to technical and audit conditions.

Strict requirements for platform availability, logging, failure processing, payment idempotency.

Player protection

Segregation of client funds (often trust/guarantee mechanisms).

Separate complaints procedure, interaction with the commission in a dispute.

Responsible play requirements: limits, timeouts/self-exclusion, risk pattern monitoring.

When the GSC IOM is selected

For brands that need a combination of strict technical supervision, the reputation of the financial center and flexibility for B2B models (networks, pools, "sharing").

3) Alderney Gambling Control Commission (AGCC), Alderney

Two-category model + associated certificates

Category 1 eGambling License (B2C): front operator - customer contract, registration/payments.

Category 2 eGambling License (B2B): transactional services/platform/game hosting.

Associate Certificates (AC1/AC2): if a significant part of the infrastructure/activities outside Alderney - associated certificates are issued for the relevant category (1/2). This allows you to legally operate in a distributed architecture.

Technical control and audit

Mandatory RNG/game certification, version/configuration control, log and monitoring requirements.

Infrastructure reliability: redundancy, DR procedures, change control.

Player protection and finance

Keeping customer funds separate, transparent return rules, checking the source of funds at thresholds.

Clear procedures for complaints, the possibility of escalation to the commission.

When AGCC is selected

For operators and suppliers who need a split B2C/B2B model recognized in the industry, with the ability to associate (off-island) without losing regulatory "legitimacy."

What three jurisdictions have in common

Verification of owners/key persons (fit & proper), financial stability and origin of funds.

Content certification and platform control (RNG/RTP, versions, logs, incident response).

Responsible play and AML/CTF: limits, monitoring, SoF/SoW on doorsteps, staff training.

Separation of player funds, clear return processes and official complaint channels.

Public registers/license lists - the ability to check the legal entity, status, type of permission.

Key differences (in one look)

Criterion	Kahnawake (KGC)	Isle of Man (GSC)	Alderney (AGCC)
Main roles	IGL (host), CPA (operator), Key Person	Full B2C, Network Services (B2B), Software	Cat 1 (B2C), Cat 2 (B2B), AC1/AC2
Hosting	Focus on approved data centers in Kahnawake, hybrids are possible	Onshore on the island + recognised external schemes	Onshore/associated certificates for off-island
Strong point	Infrastructure/hosting, practicality of exit	Strict tech supervision, reputation of the financial center	Clear B2C/B2B separation, flexible off-island mode
RG/AML Focus	Requirements and monitoring at operator level	Strong fin discipline and DR/safety	Standardized auditing of games/transactions
For whom. com operators, startups with colocation	Brands with B2B networks and high reliability requirements	Platforms/aggregators + distributed operators

How to Player Check Your License (5 Steps)

1. Find the legal entity, license type and regulator (KGC/IOM GSC/AGCC) in the footer.

2. Open the public register of the regulator and find the entry in the legal entity.

3. Check the status (Active/Current), the type of permission (B2C/B2B) and, if possible, the brand/domain.

4. Check the complaints/ADR section and return rules on the operator's website.

5. Make sure that the conditions of conclusions, bonuses and RG-tools (limits/self-exclusion) are clearly described.

How to choose a jurisdiction (short guide)

Need a quick start and hosting from an approved provider - see KGC.

The reputation of the financial jurisdiction, DR requirements and B2B networks are important - Isle of Man is suitable.

You need a clear B2C/B2B model with off-island components - Alderney (Cat 1/2 + AC).

Anyway: Prepare RG/AML policies, fund sharing, game certification, key person assignments, and dashboards for audits.

Red flags (for any license)

There is no legal entity/license number in the footer - only the logo.

In the registry - another legal entity or status is inactive.

Unclear rules of conclusions/bonuses, no complaint channels.

There are no RG tools (limits/self-exclusion) and an understandable KYC/AML policy.

Mini-FAQ

Is it possible without onshore hosting?

Depends on the mode: IOM has recognized external schemes, AGCC has Associate Certificates, KGC has the most often approved provider in the jurisdiction (hybrids are possible). Always check current requirements.

How is B2B different from B2C in these jurisdictions?

B2C - player contract (registration, deposit/withdrawal). B2B - transaction/network services: platform, game hosting, pools, aggregators.

Where to complain when arguing?

First - in support of the operator according to the regulations. Then - to the commission of the relevant jurisdiction (each has its own order and forms).

Why can a domain not appear in the registry?

Not all registries publish domains, sometimes only a legal entity/license type. In this case, ask the operator for a direct link to the license card and confirmation of brand coverage.

Kahnawake, Isle of Man and Alderney are different in terminology and architecture, but similar in principles: strict verification of owners and key persons, certification of games and platforms, separation of customer funds, RG/AML procedures and transparent complaints. When choosing an operator, do not believe one logo - check the legal entity and status in the registry. When choosing a jurisdiction for a business, compare the speed and flexibility of launch (KGC), tech supervision and reputation (IOM GSC) and a clear B2C/B2B model with off-island (AGCC).