Giselle Borg and Valentina Franch
Online gaming operators sit at the intersection of rapid technological innovation, heightened regulatory scrutiny and increasing societal expectations. As digitally native businesses, they are designed for speed and scale, shaped by real-time customer interaction, advanced analytics and the growing use of artificial intelligence.
While these developments have transformed how online gaming businesses operate and create value, governance and board oversight frameworks have not always evolved at the same pace. As a result, boards face increasing pressure to demonstrate clear accountability and effective oversight of risk, conduct and technology, while continuing to support innovation and commercial agility.
In this environment, governance is no longer a compliance exercise. It is a strategic capability that underpins regulatory credibility and supports sustainable growth in a fast-moving and highly regulated sector.
Board oversight in a digitally native environment
Boards of gaming operators oversee businesses that operate continuously, are highly data-driven and increasingly complex. The most critical risks, spanning technology, data governance, third-party dependencies and player protection, do not arise at fixed intervals. Instead, they evolve dynamically and often simultaneously across multiple jurisdictions, requiring ongoing oversight, real-time awareness and adaptive governance.
Traditional models, built around static reporting cycles and retrospective assurance, can struggle to provide boards with the insight needed to exercise timely and informed oversight.
In this context, board effectiveness is defined by judgement rather than volume. Strong boards focus on clarity of accountability, quality of challenge and the relevance of information presented to them. They regularly test whether committee mandates, escalation thresholds and information flows reflect the realities of the operating model.
From a regulatory perspective, effectiveness is increasingly assessed through outcomes and supervisory engagement, rather than through the existence of policies or frameworks alone.
Governance as a strategic enabler of decision-making
In online gaming, governance has a direct impact on the speed and quality of decision-making. Clear articulation of risk appetite, well-defined decision rights and proportionate escalation mechanisms enable boards to support innovation without diluting accountability.
Where governance is unclear or overly complex, decision-making slows, risk ownership becomes blurred and regulatory exposure increases.
Leading boards are, therefore, reframing governance as an enabling mechanism. Rather than focusing solely on assurance, boards and committees are increasingly expected to support strategic foresight, anticipate emerging risks and provide constructive challenge as the business evolves.
This shift is particularly evident in the role of audit and risk committees, which are being asked to balance their traditional oversight responsibilities with forward-looking consideration of technology, data and operational resilience.
“In online gaming, governance has a direct impact on the speed and quality of decision-making”
AI, data and technology risk as core board topics
Artificial intelligence and advanced data analytics are now integral to online gaming operations. They support customer engagement, marketing optimisation, fraud detection, AML monitoring and responsible gaming initiatives. At the same time, they introduce new governance challenges relating to transparency, model risk, data quality, ethical use and accountability.
Boards are not expected to manage these technologies directly, but they are expected to understand how they are governed. This includes clarity over who owns key decisions, how risks are identified and monitored, and how issues are escalated to the board.
Many boards are responding by investing in targeted training, refreshing committee mandates and introducing topic-specific governance frameworks that strengthen effective oversight of AI, data and digital assets. These measures help boards move from passive receipt of information to informed challenge and effective stewardship.
Regulatory engagement and governance in practice
Supervisory authorities across jurisdictions are increasingly focused on how governance operates in practice, with a clear shift towards more risk-based and outcomes-focused supervision. Boards are expected to understand the key risks facing the business, actively oversee management responses and demonstrate informed engagement with regulatory priorities.
Malta provides one illustrative example of this broader supervisory direction. The Malta Gaming Authority’s Regulatory Oversight publication for 2026 reinforces a continued shift towards risk-based, evidence-led and outcomes-focused supervision, with an emphasis on governance effectiveness, accountability of key functions and the expectation that boards can demonstrate oversight in practice.
Similar signals can be observed across other regulated markets, reinforcing the need for continuous improvement in governance arrangements and more structured, evidence-led engagement between boards and regulators.
For boards, this means governance cannot be static. Periodic board and committee effectiveness reviews, governance benchmarking and structured succession planning provide a mechanism to identify gaps before they surface through supervisory engagement. They also support more credible and constructive dialogue with regulators, grounded in evidence rather than assertion.
Conclusion
For gaming operators, governance has become a defining factor in how effectively boards can steer the business through complexity and change. Boards that invest in their own effectiveness, strengthen oversight of technology and data risks, and treat governance as a strategic capability are better positioned to support innovation while maintaining regulatory credibility.
In practice, this often involves a more deliberate and forward-looking approach to governance. Many boards are making use of board and committee effectiveness assessments, governance benchmarking and targeted training on relevant areas.
Others are refreshing succession planning and introducing topic-specific governance frameworks, for example in relation to AI, ESG or tax, to ensure oversight remains aligned with the business and its risk profile.
Taken together, these measures help boards move beyond compliance and embed governance as a practical enabler of sustainable growth in a highly regulated environment.
Giselle Borg is a partner, Risk Consulting Advisory Services, KPMG in Malta, ([email protected]) and Valentina Franch is senior manager, Gaming Regulatory Lead, KPMG in Malta ([email protected]).
https://www.mga.org.mt/app/uploads/Regulatory-Oversight-2026.pdf
