Two critical flaws in PHP, the programming language behind a large share of the world’s websites, were made public and fixed on 21 October 2026. Here is what they mean for your business and what to do this week.
The flaws, known as PHP2Shell, let an attacker with no username or password run their own commands on an unpatched web server. In the United States, the Cybersecurity and Infrastructure Security Agency (CISA) has told organisations to patch immediately or take affected systems offline, and in the UK the National Cyber Security Centre (NCSC) is urging organisations to act now. Continent 8 Technologies is advising every customer to treat this as a priority for the coming days.
“PHP2Shell sits in the engine underneath thousands of everyday business websites, so the question for every board this week is simple: do you know everywhere PHP runs, including at your suppliers and partners, and has each of those systems been updated? Our security teams are already working with customers to answer that question”, said Anthony Abou-Jaoude, Chief Transformation Officer, Continent 8 Technologies.
The two flaws carry the industry reference numbers CVE-2026-109618 and CVE-2026-109619. Researchers at Calif, Wiz and OpenAI found them with the help of AI tools and reported them privately to the PHP project in August. Details leaked online on 20 October, so the PHP security team released its fixes a day earlier than planned and rated both flaws 9.2 out of 10.
The weakness sits in PHP itself rather than in any single website or product. Popular systems built on PHP, including WordPress, Magento and Drupal, are exposed unless the server underneath has been updated. On the day of release, internet scanning company Censys counted more than 2.5 million servers on the internet running PHP, although not all of them will be vulnerable.
Tools to exploit the flaws are now public, and watchTowr reports attack attempts against its monitoring systems. CISA said in its alert that it had not yet seen exploitation, and as of the evening of 21 October no successful attacks had been publicly confirmed. History suggests the gap will be short: when a previous critical PHP flaw was disclosed in 2024, attackers were trying to exploit it within a day, according to Greenbone.
A web server taken over through PHP2Shell gives an attacker a foothold close to player accounts, payment journeys and back-office systems. Security firm Sansec also reports that one of the flaws can leak fragments of server memory, which may include passwords and access keys, even where no takeover happens.
For licensed operators and their suppliers, a breach quickly becomes a regulatory matter wherever they hold licences. In Great Britain, the Gambling Commission expects a security breach that affects the confidentiality of customer data, or stops customers reaching their accounts for more than 12 hours, to be reported as a key event within five working days. The Malta Gaming Authority asks for similar incidents to be reported through its Licensee Portal within 72 hours, and data protection law sets its own 72-hour deadline for personal data breaches. Businesses that handle card payments should note that PCI DSS expects critical security patches to be installed within one month of release.
In the United States, each state gaming regulator, such as New Jersey’s Division of Gaming Enforcement or the Pennsylvania Gaming Control Board, sets its own security requirements for online operators and their suppliers, so check your licence conditions for when an incident must be reported. Every state also has its own data breach notification law with its own deadlines. Companies listed on a US exchange face a further clock: under SEC rules, a cybersecurity incident judged to be material must be disclosed on Form 8-K within four business days of that judgement.
Availability is at stake as well. The NCSC, CISA and the European Union’s computer emergency response team, CERT-EU, all advise taking systems offline or isolating them if they cannot be fixed promptly. A planned maintenance window now costs far less than an unplanned outage or an incident investigation later.
Start by finding out where PHP is running. It is rarely confined to one platform. In our sector it often sits behind affiliate and comparison sites, marketing microsites built on content management systems such as WordPress, internal admin tools, older cashier pages and products bought from third parties. CISA warns that PHP is often built into other software, where it may not be obvious, and the NCSC advises checking every PHP installation, starting with anything reachable from the internet, and not assuming that only out-of-date versions are affected.
Next, update and restart. The fixed releases are PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35, and the major Linux distributions are publishing their own patched packages. Web servers must be restarted after the update, or the old code keeps running. Systems on PHP 8.1 or older no longer receive official fixes and need an upgrade or a vendor patch. Where an update cannot happen straight away, the PHP project has published temporary settings that reduce some of the risk, and a web application firewall (WAF), which filters malicious traffic before it reaches the server, can buy time. Neither replaces the update.
Then check whether anything has already happened. The NCSC recommends looking for backdoors as well as patching. In practice that means searching for web shells, which are small malicious files an attacker leaves behind to keep access, along with unexpected programs started by the web server and unexplained crashes in PHP logs. The attack can succeed without crashing anything, so a quiet system is no proof of a clean one. If a system may have been compromised, change every password and key it held.
Finally, be ready to report and bring your suppliers in. Confirm who decides whether an incident is notifiable, and make sure your compliance team has the reporting deadlines for every regulator you answer to, including gaming, data protection and, for listed companies, securities regulators. Ask every supplier and partner that runs PHP on your behalf to confirm in writing that they have patched and checked for compromise, and keep a record of their answers.
Our secure8 services can support each of those steps.
If you are unsure whether PHP2Shell affects you or your suppliers, contact your Continent 8 account manager or our security team today. If you suspect an active compromise, please get in touch so our analysts can respond as quickly as possible. We will update this advisory as the situation develops.
Fully managed service delivers content acceleration and edge security through a single trusted provider.
Continent 8 Technologies, the leading managed hosting, connectivity, cloud and cybersecurity provider to the global iGaming and online sports betting industry, today announced a partnership with Varnish Software to launch SecureEdge, a new managed service designed to help operators enhance digital performance, strengthen security and support the demands of regulated markets.
SecureEdge combines content delivery, web application firewall (WAF) and DDoS protection in a single solution delivered and managed by Continent 8 Technologies. Through the partnership, Continent 8 becomes the first organisation globally to deploy Varnish CDN in a Box directly across its own network infrastructure, extending its portfolio with capabilities built specifically for sportsbook, casino, live dealer and platform operators.
Justin Cosnett, Chief Product Officer at Continent 8 Technologies, said: “As operators expand into new markets and customer expectations continue to rise, they need digital infrastructure that delivers performance, resilience and security without adding unnecessary complexity. SecureEdge provides a fully managed solution tailored to the realities of the iGaming industry, helping organisations deliver exceptional user experiences while maintaining confidence in the availability and protection of their platforms. Our partnership with Varnish Software allows us to bring proven content delivery and edge security capabilities to customers through the Continent 8 platform they already know and trust.”
Jesper Hedblom, Head of Varnish CDN at Varnish Software, said: “The iGaming industry places unique demands on digital infrastructure, from sudden traffic spikes driven by live events to the need for consistently low latency and strong security. By deploying Varnish technology directly across its network, Continent 8 can provide operators with high-performance content delivery and integrated edge protection through a managed service built specifically for their needs.”
Online betting and gaming platforms regularly experience sharp increases in traffic around major sporting events, tournaments and other high-profile moments. Maintaining performance during these periods is critical to player experience, while evolving cyber threats continue to place additional pressure on operators and their technology teams.
Built to address these challenges, SecureEdge accelerates the delivery of websites, applications, APIs and streaming services while helping safeguard critical infrastructure from malicious traffic and attacks. By processing and filtering traffic closer to end users, the service helps maintain responsiveness during peak periods and reduces the burden on origin infrastructure.
SecureEdge also helps operators meet the requirements of increasingly complex regulatory environments. Delivered through Continent 8’s global infrastructure platform, the service enables organisations to align traffic delivery with market-specific obligations while maintaining a consistent experience for players across jurisdictions.
The launch further strengthens Continent 8’s infrastructure and cybersecurity portfolio, providing customers with an additional solution to support growth, operational resilience and long-term success in highly regulated markets.
SecureEdge is available immediately to new and existing Continent 8 customers. For more information, visit our SecureEdge page or contact your Continent 8 account manager.
The gaming industry has never had more opportunities than it does today.
By Jamie Garcia, Director, Regulatory Security at Continent 8 Technologies
Every conference, every customer conversation, and every industry event seems to introduce the next big thing. Artificial intelligence. Automation. Blockchain. Digital identity. Cloud-native gaming platforms. Cashless wagering. Real-time compliance monitoring. New wagering models. The list keeps growing.
And honestly, that’s a good thing. Innovation is what keeps our industry moving forward.
But after moderating a panel at G2E on balancing innovation, regulation, and cybersecurity, I walked away with a realization that wasn’t really about AI, blockchain, or any specific technology.
The conversation kept coming back to one word: Trust.
Technology will continue to evolve. The real challenge is making sure trust evolves with it. The discussions during the panel repeatedly focused on responsible innovation, cybersecurity governance, regulatory engagement, accountability, and maintaining confidence in new technologies.
One theme that emerged consistently was that organizations are no longer debating whether technologies such as AI will have a role in gaming, but how they can be implemented responsibly within existing regulatory and operational frameworks.
Ten years ago, launching online gaming in a new market felt innovative. Today, innovation is happening across every corner of our industry.
Operators are exploring AI to improve customer support and fraud detection. Suppliers are automating processes that once required significant manual effort. Regulators are evaluating technologies that improve transparency and oversight. Organizations are finding new ways to manage identity, payments, compliance, and security.
The technology itself is rarely the difficult part. The difficult part is figuring out how to implement it responsibly. I’ve seen organizations become so focused on what a technology can do that they forget to ask what risks it introduces.
What data is being collected? Where is it stored? Who has access to it? How is it protected? How do you prove it is operating as intended?
Those are the questions that ultimately determine whether technology succeeds in a regulated environment.
Artificial intelligence was one of the hottest topics throughout G2E, and understandably so.
But what surprised me was how little the discussion centered on AI models themselves. Instead, much of the conversation focused on governance.
How do organizations ensure AI is being used appropriately? Who is accountable for the outcomes? How do you validate answers generated by AI? How do you ensure sensitive data remains protected? How do you explain decisions to regulators, auditors, and stakeholders?
Those questions are far more important than deciding which AI model to use. The model is often the easiest part. The governance is where the real work begins.
Several panelists highlighted that accountability remains one of the biggest challenges in AI adoption. While the technology continues to advance rapidly, organizations still need clear governance frameworks that define ownership, oversight, and decision-making responsibilities.
As gaming organizations continue adopting AI, success won’t be determined by who deploys AI first. It will be determined by who deploys it responsibly.
One of my favorite moments during the discussion came when the conversation shifted from technology back to people.
Because for all the excitement around AI and automation, human oversight still matters. A lot.
Technology can help us make faster decisions. It can identify patterns we might otherwise miss and it can improve efficiency and reduce manual workload.
But technology should support human decision-making, not replace it.
Gaming has always been built on integrity, accountability, and trust. Those principles don’t disappear just because we introduce new technology into the environment.
At the end of the day, accountability still belongs to people.
A mistake I still see organizations make is treating compliance and cybersecurity as final checkpoints before launch.
The product gets built. The architecture gets designed. The integrations get completed. Then someone asks if it’s compliant.
That approach almost always creates unnecessary challenges.
The most successful projects are the ones where compliance, cybersecurity, operations, and product teams are working together from the beginning.
When security and compliance are embedded into the design process, organizations can identify issues earlier, avoid costly redesigns, and launch with significantly more confidence.
That’s not slowing innovation down. That’s making innovation sustainable.
There is occasionally a narrative that innovation and regulation are somehow competing forces.
I don’t see it that way. Having worked with regulators, operators, suppliers, and technology providers across multiple jurisdictions, I’ve found that everyone is generally trying to solve the same problem.
How do we encourage innovation while maintaining integrity, consumer protection, and trust?
Those goals are not mutually exclusive.
In fact, one of the more interesting takeaways from the discussion was the level of alignment between regulators, operators, and technology providers. While perspectives naturally differed, there was broad agreement that early engagement leads to better outcomes for everyone involved.
Cybersecurity is no longer just an IT discussion.
Modern gaming environments are interconnected ecosystems.
Operators rely on cloud providers, payment processors, geolocation vendors, KYC providers, game suppliers, managed service providers, and countless additional technology partners. Every integration creates opportunity. Every integration creates risk.
Several panellists noted that as iGaming ecosystems become more interconnected, managing third-party and supply-chain risk is becoming just as important as securing internal systems and infrastructure.
That’s why cybersecurity must be considered a business requirement rather than simply a technical requirement. Security can no longer be something added immediately before certification or production deployment. It has to be built into the architecture from the start. The organizations that recognize this tend to be the ones that innovate most effectively because they avoid creating unnecessary risk along the way.
The technologies will change. AI will evolve. Blockchain use cases will mature. New products will emerge. Regulations will continue adapting. Cyber threats will continue evolving.
What will remain constant is the need for trust. Trust from regulators. Trust from players. Trust from business partners. Trust from communities.
Innovation allows the industry to grow. Regulation protects integrity. Cybersecurity protects the systems, data, and people that make innovation possible.
Those are not competing priorities. They’re interconnected responsibilities.
And when all three work together, the industry is positioned to do incredible things.
These themes were at the heart of the discussion during my G2E panel, “Balancing Innovation and Regulation in Gaming Cybersecurity,” where industry leaders explored how Gaming can continue embracing emerging technologies while maintaining strong cybersecurity, regulatory compliance, operational integrity, and public confidence.
If there was one takeaway I left the session with, it’s this:
The future of gaming won’t be defined by the technologies we adopt.
It will be defined by how responsibly we implement them.
New cloud data center combines modular edge architecture, global connectivity and regulatory compliance for operators and suppliers
Continent 8 Technologies, a leading provider of cutting‑edge managed IT solutions designed for the global iGaming and online sports betting industry, has officially opened its new data center facility at Tioga Downs Casino Resort in Nichols, New York.
Developed specifically to meet the technical, operational and regulatory requirements of New York’s online sports betting market, the purpose-built facility provides a secure and compliant environment for licensed operators and approved B2B suppliers serving one of the most significant regulated wagering jurisdictions in North America. Designed as a specialist edge data center, it reflects Continent 8’s approach of delivering industry-specific infrastructure close to the regulated markets it serves, rather than relying on large-scale hyperscale deployments.
Built using Continent 8’s modular design approach, the facility launches with approximately 500kW of capacity and 24 racks, with the ability to expand to 48 racks as customer demand grows. The site is supported by resilient power, cooling, connectivity and security systems and is fully managed by Continent 8.
The New York site extends the company’s unbeatable North American footprint and provides customers with direct access to the company’s private global network, which spans more than 100 locations across five continents, including 30+ US states.
New York is the largest regulated online sports betting market in the United States, generating more than $26 billion in wagers during 2025 alone. The facility has been developed to support the operators and suppliers serving this market, including leading brands such as FanDuel, delivering the infrastructure, connectivity and services required both for today’s operations and tomorrow’s technology requirements.
As operators increasingly explore AI-enabled applications across areas such as customer experience, operations and security, the edge deployment forms part of Continent 8’s broader strategy to support innovation within regulated environments.
Michael Tobin, Founder and Chairman at Continent 8 Technologies, said: “The future of infrastructure for our industry isn’t about building ever-larger facilities. It’s about delivering the right infrastructure in the right locations to support highly regulated markets.”
“New York is a perfect example of that approach. This facility has been developed specifically for the needs of regulated online sports betting operators and suppliers, providing the foundation they need to participate and innovate within the market.”
“We believe edge infrastructure will play an increasingly important role in the future of online sports betting, and we’re proud to be continuing that journey with this opening.”
Mike Small, Chief Executive Officer at Continent 8 Technologies, said: “Operators and suppliers increasingly need more than hosting infrastructure. They need a partner that can support connectivity, cloud, cybersecurity and emerging technologies through a single integrated platform.”
“This facility combines local market presence with access to Continent 8’s global network and managed services capabilities, helping customers deploy, scale and innovate with confidence.”
“As demand continues to grow, we’re looking forward to supporting both existing customers and new entrants as they expand their presence in the market.”
The new deployment reinforces Continent 8’s strategy of delivering market-specific infrastructure that helps operators and suppliers scale with confidence.
Joint venture helps iGaming operators deploy AI at scale with policy-aware, auditable AI applications that meet jurisdictional requirements across every market they serve.
Continent 8 Technologies and FuturePath AI today launched Future8, an AI-native operating company built for regulated operators, formed as a joint venture between the two companies.
Announced at SBC Summit Lisbon, Future8 combines FuturePath’s enterprise AI applications platform with Continent 8’s licensed global operating footprint, enabling the iGaming industry to deploy auditable AI without compromising compliance, data sovereignty and operational control.
Built for highly regulated environments, Future8 enables operators to move from AI experimentation to production deployment by embedding governance, approvals and auditability into every workflow from day one.
Continent 8 brings licensed data centers and a private global network spanning more than 100 locations, built over 28 years serving the biggest iGaming and online brands, along with AI-enabled Global Capability Centers in India, the Philippines and Bulgaria. The company also contributes operational expertise, jurisdictional knowledge and intelligence derived from one of the industry’s largest collections of regulated infrastructure and operational data, helping Future8 tailor AI solutions to the operational realities of the iGaming sector.
FuturePath brings a production enterprise AI applications platform, with pre-built AI applications powered by coordinated agents, already running enterprise operations for Fortune 500 companies across multiple industries. Together, the companies are adapting proven enterprise AI to the workflows, controls and operating realities unique to iGaming. Unlike generic agent frameworks or toolkits, FuturePath delivers regulator-ready AI applications designed to solve real business challenges for licensed operators.
Until now, the iGaming sector has faced a difficult dilemma: how to deploy AI at scale while maintaining the strict, policy-aware explainability that licensing bodies demand across every jurisdiction they operate in. Regulators have moved past asking only where data sits. They now ask how a decision was made, a question AI raises and infrastructure alone never did.
Future8 is built to make that evidence automatic. Because its advantage is regulatory standing rather than physical location, it holds whether a workload runs in a Continent 8 facility, in a public cloud region, or in the operator’s own account.
This allows organizations to standardize AI governance across jurisdictions while retaining flexibility in where and how workloads are deployed.
“Everyone has AI. Almost nobody can run it in a regulated market,” said Mike Small, CEO of Continent 8 Technologies. “Future8 lets operators optimize their business and achieve efficiencies with AI that regulators can actually audit, in every jurisdiction they hold a license.”
“Our AI applications – coordinated agents executing real business work – already run real operations inside Fortune 500 enterprises, with every action governed and auditable,” said Saurabh Bhatia, CEO of FuturePath AI. “Continent 8 brings 28 years of regulatory standing that no AI company can replicate. Together, we are building the AI application and accountability layer licensed industries will need to run AI in production.”
No two iGaming operators run the same way, which is why Future8 is built to deliver outcomes rather than tools alone.
Future8 is designed to meet organizations wherever they are in their AI journey. They can engage through advisory services, managed AI-operated services or direct platform deployment, allowing them to adopt AI at a pace that matches their operational and regulatory requirements.
Its services are organized into three offerings that meet operators at any stage of AI maturity, from first assessment to full deployment:
AI Readiness Assessment for Regulated Industries. A structured evaluation of the operator’s estate, its automation opportunities, and the license conditions that govern them, concluding with a joint executive readout that maps where AI can be deployed and how it will be evidenced.
Managed AI-Operated Services. Future8 assumes the operational workload through a global delivery network, staffed onshore, nearshore, or offshore according to what each jurisdiction requires, so coverage follows the license. The operator pays for outcomes, and the work automates down over time. As automation increases, operators benefit from improved efficiency and faster execution while maintaining the governance and controls regulators require.
Platform Subscription. For organizations that prefer to run AI in their own environment, Future8 licenses the AI applications directly, layered with the jurisdictional policy, control, and evidence artifacts that make them acceptable to a regulator.
The platform can be deployed within Continent 8 infrastructure, public cloud environments or customer-owned environments while maintaining consistent governance controls.
Future8 builds on FuturePath’s field-tested enterprise AI, already proven in Fortune 500 environments, where AI applications, powered by autonomous agents, handle tens of thousands of complex workflows monthly and reduce resolution times by up to 40%. Forward Deployed Engineers work alongside operators to adapt and deploy it to their specific workflows, systems, and regulatory requirements.
Across the iGaming industry’s business, Future8 spans IT and technical operations, cloud migration, finance and procurement, and player-facing operations, with every workflow governed, auditable, and evidenced to the regulator.
Whether deployed as software, consumed as a managed service, or delivered through a hybrid model, Future8 combines AI technology, operational expertise and regulatory oversight into a single offering.
Future8 launches with an initial focus on regulated iGaming, with a longer-term vision to support additional licensed industries where governance, auditability and compliance are essential to AI adoption.
To learn more or book a demo, visit future8.ai.
Continent 8 Technologies, a leading provider of cutting-edge managed technology solutions designed for the global iGaming and online sports betting industry, today announced its expansion into Africa with the launch of a new data centre in Johannesburg, South Africa. The deployment extends Continent 8’s full portfolio of managed technology, connectivity, cloud and cybersecurity solutions into the region, supported by its purpose-built private global network and world-class digital infrastructure.
Live in Q4 2026, the Johannesburg facility marks Continent 8’s first deployment on the African continent and will enable operators, platform providers and content suppliers to deliver faster, more consistent digital experiences to South African players while remaining seamlessly connected with their wider international operations and partners.
As one of the world’s highest-volume regulated betting markets, South Africa demands infrastructure capable of supporting substantial transaction volumes with low latency and high resilience. Located close to market and directly connected to Continent 8’s private global backbone, the new facility will enable customers to leverage the same highly resilient infrastructure used across more than 100 connected locations worldwide. Operators and partners entering or expanding within South Africa will benefit from seamless access, low latency connectivity via a network that ranks among the top 20 most connected globally.
Mike Small, CEO at Continent 8 Technologies, said: “Expanding into Africa is a significant milestone for Continent 8 and a natural next step in our global growth strategy. South Africa is one of the most important, regulated betting markets in the world, and establishing a presence in Johannesburg allows us to bring the full strength of the Continent 8 platform closer to customers operating in the region. Beyond local infrastructure, customers will gain access to our private global network, cybersecurity expertise, cloud ecosystem and one of the most connected networks in the world, enabling them to innovate, scale and operate with confidence across multiple jurisdictions.”
The Johannesburg data centre will provide Tier III infrastructure within an ISO 27001-certified environment and deliver Continent 8’s full portfolio of managed technology services, including colocation, managed infrastructure, cloud connectivity, content delivery, DDoS protection and managed cybersecurity. Customers will also gain access to Continent 8’s private global network, and benefit from direct connectivity to leading hyperscale cloud providers including AWS, Google Cloud and Microsoft Azure.
Andrew Mudge, Head of EMEA Sales at Continent 8 Technologies, added: “Our customers increasingly operate across multiple regulated markets, and they want technology partners that can support that complexity without compromising on performance or reliability. Establishing a presence in Johannesburg allows us to bring our experience and infrastructure proposition directly into the South African market, while giving customers a partner they can scale with as their businesses grow. Just as importantly, they gain immediate access to the connectivity, cloud, security and managed services capabilities that underpin Continent 8’s global platform, helping them accelerate growth both within the region and internationally.“
The launch further strengthens Continent 8’s presence across regulated iGaming markets worldwide and reinforces its commitment to delivering secure, resilient and high-performance infrastructure wherever its customers operate.
Continent 8 Technologies, a leading provider of managed IT, cloud, cybersecurity and connectivity solutions for the global iGaming and online sports betting industry, has marked 20 years of operations in the Isle of Man by welcoming His Excellency Sir John Lorimer, Lieutenant Governor of the Isle of Man, to its Douglas facility.
During the visit His Excellency met members of the local team and learned more about the company’s journey from a specialist infrastructure provider into a global technology partner serving customers across the world.
The visit formed part of Continent 8’s celebrations of 20 years in the Isle of Man, where the company established operations in 2006 with the launch of a data centre in Douglas. Since then, the business has expanded significantly, growing alongside the evolution of the global iGaming industry while maintaining a long-standing presence on the Island.
Founded in 1998, Continent 8 today delivers network, connectivity, cloud, cybersecurity and AI-powered solutions to customers worldwide. The company employs more than 300 professionals globally and operates a private network spanning over 100 connected locations across Europe, the Americas, Africa and Asia.
Justin Cosnett, Chief Product Officer at Continent 8 Technologies, said: “The Isle of Man has been an important part of Continent 8’s journey for the past 20 years, and it’s a place that has become very special to me personally. Having just relocated to the Island, I’ve experienced first-hand the strong sense of community, the quality of life and the supportive environment that make it such a great place to live and work. Those same qualities have helped businesses like ours attract talent, innovate and grow.
As we celebrate this milestone, we’re proud of the contribution our Isle of Man team has made to the success of Continent 8 and grateful for the support we’ve received over the years. It was a pleasure to welcome His Excellency to our Douglas facility and share more about our history, our people and our ambitions for the future.”
His Excellency Sir John Lorimer, Lieutenant Governor of the Isle of Man, said: “It is a pleasure to visit Continent 8 Technologies and meet the team as the company celebrates 20 years in the Isle of Man. Over the past two decades, Continent 8 has grown from its Island base into an internationally recognised technology business, demonstrating the talent, ambition and innovation that are helping to shape the Isle of Man’s economy. Companies such as Continent 8 help strengthen the Island’s reputation as a place where ambitious, internationally focused businesses can establish, grow and thrive. I congratulate everyone involved on this significant milestone and wish them every success in the years ahead.”
Over the past two decades, Continent 8 Technologies has supported many of the industry’s leading operators and suppliers, including bet365, BetMGM, DraftKings, FanDuel, Kambi, Playtech and Sportingtech, helping them launch, scale and operate in regulated markets around the world.
Looking ahead, the company remains focused on investing in the technologies, talent and capabilities that will support the next generation of digital businesses and the continued evolution of regulated iGaming.
– By Cristopher Kuehl, Chief Data, Information & AI Officer
“We have an AI strategy.”
That is now fairly standard across iGaming boardrooms. The problem? Many of those strategies are already failing at the infrastructure level.
Having a strategy and having the infrastructure required to execute it are two very different things. Across the industry, there is a growing gap between ambition and operational reality. Operators are investing in heavy large language models (LLMs) and complex predictive tools. Yet many are still relying on infrastructure originally designed for traditional workloads.
If you are an operator, the question is no longer whether a provider can “host AI”. Instead, the focus should be on how their network handles the specific, high-velocity and highly regulated demands of iGaming.
Here are the core technical questions to bring to your next vendor review.
Legacy iGaming infrastructure was built around CPUs and RAM. Modern AI requires parallel processing, graphics processing units (GPUs) and Neural Processing Units (NPUs).
If your provider is quoting standard cloud instances without detailing specialised hardware clusters, this may limit AI performance and scalability. Operators should look to providers that can offer access to high-performance GPU infrastructure within regulated environments.
Running workloads on a general-purpose cloud in a different country can create latency. Localised, high-density compute is often needed to handle real-time fraud detection and in-play personalisation.
Data residency is a strict, known regulatory requirement in iGaming and online sports betting. Player data cannot cross certain borders. However, AI creates additional complexity: not just where data is stored but where it is processed.
For example, if your player database sits in Ontario, Canada, but the AI model that is performing lives in a data centre in Virginia, US, this may raise compliance concerns depending on how data is processed and transferred. Regulators across multiple jurisdictions, including the UK and North America, are increasing scrutiny of data residency, cross-border processing and third-party dependencies.
As a result, operators should ensure that both data and the associated AI processing remain within approved regulatory boundaries. In practice, this means working with providers that support in-country or regionally compliant AI deployments.
Regulators require transparency. For example, if an algorithm flags a VIP player for problem gambling or blocks a withdrawal, the operator must be able to prove the reasons why it happened.
Standard logging alone is insufficient. You need telemetry that captures model inputs, the exact weights used, and the confidence score of the output.
Asking the provider what kind of audit logging they support at the model layer is important. Without a regulator-ready audit trail of a specific AI decision, operators cannot deploy that model in a live environment. Operators should be able to recreate the exact logic path the AI took at any historical timestamp.
In our sector, milliseconds translate directly to revenue. Research across digital platforms shows that even a one-second delay in mobile load time can reduce conversion rates by up to 20%. This highlights how sensitive user engagement is to performance, particularly in mobile-first environments that closely mirror player behaviour.
At the same time, the cost of disruption is immediate. Industry estimates suggest downtime in gaming environments can exceed $6,000 per minute, underlining the direct financial impact of even short service interruptions.
Therefore, in use cases such as real-time odds generation or live bet limits triggering, the processing time should be near zero. Operators should assess the proximity between their operational data and AI compute environments. Architectures relying on public internet connectivity may suffer in terms of user experience. A private, high-speed connection between your raw operational data and your AI models is needed, ideally with the compute sitting adjacent to the data.
Operators should evaluate orchestration and security. Scaling AI capacity based on a Saturday night player load requires managed Kubernetes specifically tuned for AI workloads. Your provider needs to scale GPU allocation up and down dynamically.
Furthermore, the security perimeter for AI is fundamentally different. Standard firewalls may not be able to stop prompt injection attacks or model manipulation.
Threat actors are no longer just trying to steal data. They are trying to disrupt the models behind the business decisions. Providers need to be able to demonstrate to operators their AI-specific defense mechanisms and how they protect the integrity of the model itself.
Stop treating AI as a plugin. It is becoming a foundational component of modern technology stacks.
The industry is moving out of the experimental phase of chatbots and into the scale phase of adoption. Even a brilliant predictive model relies on the quality of the infrastructure supporting it.
The opportunity is clear: ask better questions, demand better answers, and choose partners built for regulated AI at scale.
Before selecting an AI infrastructure provider, operators should pressure-test capabilities against a core set of non-negotiable requirements.
Continent8 has built its infrastructure specifically for the demands of regulated iGaming and online sports betting, not retrofitted from general-purpose cloud environments.
With a global footprint of licensed locations spanning over 100 data centres globally, private high-speed connectivity, and in-country compute capabilities, Continent 8 enables operators to deploy AI workloads where they need to run – securely, compliantly, and with minimal latency.
From GPU-enabled environments to fully auditable architectures and AI-aware security, the focus is on delivering infrastructure that is aligned to the operational realities of modern iGaming. As AI moves into core production systems, having a provider that understands both the regulatory landscape and the performance requirements becomes essential.
To see how leading operators are deploying AI securely, compliantly and at scale using purpose-built infrastructure, explore iGaming Business’ latest industry report: What operators should be asking their AI solution providers in 2026
Expanded collaboration enables Continent 8 to bring new multitenant cloud and AI-ready capabilities to customers worldwide.
Continent 8 Technologies, a leading provider of cutting‑edge managed technology solutions designed for the global iGaming and online sports betting industry, today announced the extension of its partnership with Nutanix, a hybrid cloud leader and AI innovator.
The expanded partnership builds on a collaboration between the two companies and reflects a commitment to delivering enterprise-grade cloud solutions for highly regulated industries. Going beyond a traditional vendor relationship, Continent 8 and Nutanix work closely together to develop and refine cloud technologies that address the performance, security and compliance requirements of regulated operators worldwide.
A key example of this collaboration is Continent 8’s selection as an early access partner to help shape Nutanix Service Provider Central (SP Central), its new multitenant cloud platform, first announced in April 2026.
Continent 8 will be among one of the first service providers worldwide to deploy a service leveraging SP Central commercially, combining Nutanix’s multitenant capabilities with Continent 8’s proven operational governance model. This approach is designed to maintain strict control and oversight across individual customer environments, a critical requirement for iGaming operators operating under complex regulatory frameworks.
The partnership extension also supports Continent 8’s continued investment in cloud expertise, engineering excellence and customer success. Through its global team of certified cloud specialists and AI-enabled Global Capability Centers (in India, Philippines and Bulgaria), Continent 8 supports large-scale cloud migrations and infrastructure modernization programs, helping customers simplify operations, optimize costs, reduce complexity and navigate evolving regulatory requirements.
Mike Small, Chief Executive Officer at Continent 8 Technologies, said: “Today’s announcement reflects the strength of our relationship with Nutanix and our shared vision for the future of enterprise-grade cloud infrastructure and services.”
“Together, we have built a partnership founded on innovation, trust and a deep understanding of the challenges faced by highly regulated industries. Extending our partnership reinforces our commitment to helping iGaming customers modernize with confidence, simplify operations, optimize costs and prepare for the next generation of digital services, cloud-native applications and AI-driven innovation.”
Edward O’Connor, Chief Technology Officer at Continent 8 Technologies, added: “Our relationship with Nutanix is much deeper than a traditional vendor relationship. For several years, our engineering and product teams have worked side-by-side to help shape solutions that address real-world service provider and customer requirements.”
“Through this collaboration, Continent 8 is delivering cloud services that combine enterprise-grade security, operational simplicity and the flexibility customers need to scale globally, accelerate innovation and respond to evolving business demands. Being one of the Nutanix Elevate Service Provider partners worldwide to deploy the new multitenant solution demonstrates the strength of our partnership and our commitment to bringing innovative cloud capabilities to customers first.”
“We are excited to collaborate with Continent 8 to bring enterprise cloud services powered by Nutanix to highly regulated industries. Our collaboration with Continent 8 is a prime example of how we are empowering service providers to build and scale cloud services. By leveraging the Nutanix Cloud Platform and SP Central and their multitenant capabilities, Continent 8 is equipped to deliver the operational simplicity, security, and performance that their customers demand and need,” commented Sachin Chheda, Vice President, Business Development and Strategic Partnerships at Nutanix.
The partnership has already delivered measurable results for customers across the global iGaming and online sports betting sector. Organizations such as Sportingtech have benefited from Continent 8’s cloud modernisation capabilities, where Continent 8 led a VMware-to-Nutanix migration that avoided a significant projected rise in virtualization costs while preserving the security, performance, and compliance posture required in regulated markets.