Continent 8’s end-to-end regulatory cybersecurity services ensure Rising Digital maintains full compliance within the six – and growing – US states in which it operates.

The Customer

Rising Digital Corporation is a gaming company that develops and publishes slot games, table games, game systems and game platforms. Recognized as the leading developer of Asian slot games in the casino gaming industry, Rising Digital provides games to the major gaming manufacturers worldwide.

The Challenge

Rising Digital required a Managed Security Service Provider (MSSP) to architect and deploy regulatory compliance programs tailored to the diverse requirements of each interested US state jurisdiction, ensuring consistent, best-in-class security and regulatory standards across all operational states.

The Solution

Rising Digital selected Continent 8, its existing cloud partner and the leading provider of infrastructure and cybersecurity solutions for the iGaming and online sports betting sector, to lead its regulatory cybersecurity strategy.

In collaboration with Continent 8 and its cybersecurity specialist division, C8 Secure, Rising Digital successfully completed a comprehensive suite of regulatory compliance assessments and services, including:

compliance audit

VAPT VSCAN

The Benefits

Rising Digital has successfully rolled out a comprehensive cybersecurity program across multiple jurisdictions, including Connecticut, Delaware, Michigan, New Jersey, Pennsylvania and West Virginia – as well as the Canadian province of Ontario – delivering compliance with state-specific requirements. In addition, Continent 8’s regulatory cybersecurity expertise has enabled the proactive identification of vulnerabilities and the delivery of actionable insights that fortify Rising Digital’s cybersecurity posture.

Project Conclusion

By partnering with Continent 8 and leveraging its regulatory cybersecurity services, Rising Digital is strategically positioned to proactively address and surpass evolving compliance requirements. This collaboration ensures a measurable competitive edge with regulators across both forthcoming US state market deployments and established jurisdictions.

Aimin Cong, CEO of Rising Digital, said: “We are delighted to formalize our relationship with Continent 8 for our growing iGaming operations business. With the utmost importance being placed upon compliance, performance and security, we believe Continent 8 is an excellent infrastructure and cybersecurity services partner.”

Patrick Gardner, Chief Security Officer at Continent 8, said: “We are honored that Rising Digital has placed its trust in Continent 8 as its infrastructure and cybersecurity partner as they expand their operations across the United States.

“At Continent 8, we pride ourselves as being a one-stop-shop provider of infrastructure, cloud, regulatory and cybersecurity solutions. Our services enable iGaming companies like Rising Digital to swiftly meet multi-state regulatory requirements, safeguarding their operations while providing peace of mind.  We stand committed to setting the highest standards and value for cybersecurity and compliance services within the ever-growing iGaming and online sports betting sector.”

For more information on how to meet your jurisdiction’s regulatory cybersecurity requirements, visit continent8.com or contact sales@continent8.com.

42%

surge in virtualisation costs mitigated

300

virtual appliances migrated seamlessly

6 months

to achieve ROI on migration services

4 months

for project completion

The Customer

Sportingtech

Sportingtech is a multi-award-winning provider of turnkey betting and gaming solutions designed for regulated and emerging markets around the globe. The omni-channel platform offers solutions for sportsbook, casino and retail betting operators, with over 10,000 products from more than 100 games providers.

With an ‘all-VMware’ virtualised enterprise private cloud architecture, the post-VMware acquisition licensing changes represented a significant cost burden to the business, up to a 42% increase in virtualisation costs.

In search of an experienced service provider to design, plan and execute a migration to a new, more cost-effective virtualised hyperconverged infrastructure (HCI), Sportingtech selected Continent 8 Technologies – a Nutanix Authorised Service Provider and current Sportingtech infrastructure and cybersecurity services partner – to provide professional and managed migration services to deliver the project using the Nutanix AHV virtualisation platform.

The Challenge

There were multiple requirements to be met from technical to commercial, with a requirement for minimal operational impact:

  • Hardware upkeep – Sportingtech hardware was recently acquired and future-proofed for capacity and resilience, so needed to be maintained.
  • Hypervisor change – Due to cost, a solution was sought which could minimise licensing fees but support current and future features, workloads and provide additional native benefits.
  • Speed/timescale and 24/7 – The project had to be completed within fixed timescales at pace, whilst not disrupting operations.
  • Resource intensive – Sportingtech runs a substantial betting and gaming operation and aimed to keep personnel focused on core revenue-generating activities – such a migration could significantly impact other projects and priorities.
  • Mixed workloads – Close to 300 virtual appliances ran a mixture of vendor applications, databases and in-house intellectual property, of different sizes and priority, requiring careful planning and scheduling.

The Solution

Continent 8 proposed and delivered a solution using Nutanix AHV and:

  • Assessed and prioritised existing workloads, crafting a plan with milestones for key operational activities to perform migration at least impact, but quickest timescale.
  • Provided a return-on-investment (ROI) cost for delivery of project and savings achieved.
  • Demonstrated ease of migration in a test proof-of-concept (PoC) environment, before proceeding with test, development and production workloads.
  • Executed migrations in advance of switch-over so the Nutanix MOVE service could copy data to the new cluster ahead of availability.
  • Monitored and checked every migration for success before progressing to the next stage, on approval by Sportingtech.

The Benefits

1. Availability2. Cost3. Speed

Continent 8 created a migration plan and schedule which minimised impact to the customer and maximised productivity.

By delving into the customer’s key operational requirements and understanding workload utilisation, this plan minimised the chance of failure or impact.

During migrations, user experiences remained unaffected, although Continent 8 provided heightened support availability in case of issue or roll-back.

By migrating, Continent 8 was able to demonstrate:

• Zero-change hypervisor licensing fees over remaining term of commitment.
• Future-proofing against future VMware pricing or licensed feature changes.
• An ROI on the professional services provided by Continent 8 within six months.
• A migration which required no additional hardware investment, making use of existing committed spend.

Continent 8 performing the work allowed customer’s operational-focused teams to maintain their regular tasks, enabling the project to be undertaken at speed.

From engagement to execution, the project was completed on-time and within budget.

Continent 8 utilised project management resources to ensure all tasks were completed in order and key milestones achieved.

 

Project Conclusion

Continent 8 successfully orchestrated a VMware-to-Nutanix migration, transitioning to a virtualisation platform that ensures predictable, manageable and lower costs, while circumventing VMware’s 42% increase in licensing fees. The project was executed with minimal-to-zero disruption to Sportingtech’s operations and users, delivering a seamless end-to-end migration experience.

“We are always looking for ways to enhance the solution we build for our customers and to keep costs down. Working with Continent 8, who constantly push to provide efficiencies, cost reductions and value-added expertise, made good sense to us. They continue to be a valued partner and managed to deliver the project on time with no service interruption for us or our customers, which is critical.”

Michael Jack, Chief Technology Officer at Sportingtech

“Continent 8 is able to use its experience with VMware, Nutanix, private and public clouds to provide professional as well as managed services to customers, enabling them to focus on core revenue-generating operations. Being able to demonstrate such a significant saving and ROI will be of interest to many enterprises in today’s market. It’s thanks to the experienced and highly qualified project and cloud engineering staff at Continent 8 that we were able to successfully complete this project, while earning Sportingtech’s trust to manage their critical operational infrastructure.”

Justin Cosnett, Chief Product Officer at Continent 8

Discover how Continent 8 can assist in evaluating, optimising and migrating your workloads to a new cloud platform by registering for a free cloud architectural review*.

*Terms and conditions apply.

Following the release of the National Indian Gaming Commission’s (NIGC) Fiscal Year (FY) 2024 Gross Gaming Revenue (GGR) report, Jerad Swimmer, Regional Sales Director at Continent 8 Technologies, provides a mid-year report on the state of tribal gaming in 2025.

Another record-setting year

On July 31, the NIGC published its annual GGR report, highlighting a record-setting $43.9 billion in revenue for FY 2024. This achievement reflects a 4.6% year-over-year increase, representing growth of $2 billion, with data collected from 532 gaming operations run by 243 federally recognized tribes across 29 states. In the NIGC press statement, Acting NIGC Chairwoman Sharon Avery remarked:

“This year’s GGR reflects not only the resilience of the tribal gaming industry, but also the dedication of tribal leadership in preserving and growing this important economic driver for their communities. The continued success of Indian gaming is a testament to the strong tribal governance and the sound regulation that protects the integrity of the industry.”

Tribal Gaming report
Image Credit: National Indian Gaming Commission’s Fiscal Year 2024 Gross Gaming Revenue report. A breakdown of NIGC’s eight regions and their respective GGR share in FY 2024.

These figures emphasize the critical economic contribution of tribal gaming, supporting essential initiatives across employment, infrastructure, education and social services within tribal communities. Yet, as the tribal gaming industry’s financial impact continues to expand, so does its exposure to cyber threat actors aiming to benefit from this growth.

Industry challenges

Over the past year, the industry has witnessed significant cyber incidents. In April of last year, a tribal casino was forced to suspend its operations following a cyber breach and advised patrons to monitor account activity for potential unauthorized access. In February of this year, one tribe experienced a ransomware attack that disrupted telecommunications and IT systems across multiple tribal entities, including casino operations.

During recent key industry events – including the OIGA Conference and Trade Show, the Indian Gaming Convention and Tradeshow (IGA) and the TribalHub Cybersecurity Summit – our team has also received direct reports of numerous cybersecurity incidents. These events have resulted in a range of financial, operational and reputational impacts for affected organizations. These forums have provided tribal casinos, gaming commissions and government bodies in Indian Country with valuable opportunities to share their cybersecurity challenges and engage with experts on effective threat mitigation strategies.

Indian Gaming Tradeshow & Convention
From left to right: Jerad Swimmer, Emra Arkansas (Executive Director, Cherokee Nation Tribal Gaming Commission), Jason Nichols (Executive Director, Forest County Potawatomi Gaming) and Scott Riley (Executive Director, Pueblo of Tesuque Tribal Gaming Commission) shared cybersecurity insights and best practices during their panel session ‘Creating and maintaining a healthy culture in a new era of cybersecurity’ at IGA 2025.

Proactive cybersecurity: positioning for long-term resilience

Given the ongoing and evolving cyber threat landscape, tribal gaming organizations must adopt a proactive cybersecurity posture – operating with an ‘assume breach’ mindset and prioritizing resilience. Robust measures are essential to safeguard infrastructure, player data, critical platforms and preserve tribal sovereignty. Recommended best practices for comprehensive cyber defense include:

Download the tribal cybersecurity checklist to start your proactive cybersecurity journey.

As a trusted Managed Security Service Provider (MSSP), we partner with tribal gaming organizations – including Cherokee Tribal Gaming Commission (TGC), ShowNation, Tachi Palace Casino Resort – to foster a culture of cybersecurity awareness, strengthen organizational security posture and ensure long-term operational resiliency.

Cybersecurity solutions for a safer tomorrow

Continent 8 provides comprehensive, multi-layered threat prevention, detection and response solutions to secure your tribal organization’s digital assets in the face of evolving cyber threats. For more information on how Continent 8 can support your cybersecurity initiatives, email sales@continent.com or fill out our Contact Us page.

Also, be sure to listen back to our Tribal Talks: Cybersecurity Unlocked podcast series. Each episode delves into new stories, insights gained, best practices and key developments that are shaping the future of tribal casino gaming and cybersecurity.

Watch Tribal Talks: Cybersecurity Unlocked.

16K

number of games accessible to B2C operators

21K

transactions per second that need to be secured

0

critical cybersecurity issues identified

Global iGaming aggregator leverages Continent 8’s Vulnerability Assessment and Penetration Testing (VAPT) cybersecurity services to securely connect B2C operators to over 16,000 games from more than 160 providers.

The customer

Alea is an award-winning leader in the field of online gaming, with a decade of experience in the industry. Alea aggregation platform handles over 21,000 transactions per second, with bank-level security, full regulatory coverage and local insights that helps their customers move faster in markets like Brazil, South Africa, Spain and beyond.

Alea is one of the industry’s most rapidly expanding game aggregators. By utilising a single API integration, Alea offers customers access to over 16,000 games from more than 160 providers, simplifying technical complexities and enhancing operational efficiency. The security and reliability of these game APIs and integrations are vital to Alea’s operational integrity.

To address the evolving cybersecurity challenges associated with a rapidly growing network, Alea engaged Continent 8 to conduct a thorough assessment and evaluation of their cybersecurity framework through a comprehensive Vulnerability Assessment and Penetration Testing (VAPT) service.

The challenge

Alea’s coding platform comprises over 100 microservices leveraging diverse technologies, databases and queue systems, presenting a significant technical challenge in securing all connections. Additionally, Alea processes over 21,000 requests per second, necessitating the demonstration of successful transaction management. With a complex aggregation platform, Alea aimed to ensure and demonstrate their status as a secure and robust game aggregator provider.

The solution

Continent 8, along with its specialised cybersecurity division, C8 Secure, conducted the cybersecurity audit. They employed their Vulnerability Assessment and Penetration Testing (VAPT) service to perform a thorough security evaluation of Alea’s entire digital infrastructure, providing a complete view of their attack surface area.

The benefits

The VAPT service from Continent 8 and C8 Secure enabled Alea to safeguard their API, code and services against vulnerabilities such as broken authentications, cross-site scripting (XSS), sensitive data exposure and SQL injection. As a result, the cybersecurity audit identified no critical issues within their aggregation platform.

Project conclusion

The comprehensive VAPT assessment allowed Alea to detect potential internal and external IT vulnerabilities, enabling them to prioritise and implement security improvements to reduce risk exposure, thereby assuring their customers of a secure and reliable platform.

Alea Partnership

Patrick Gardner, Chief Security Officer at Continent 8, presenting Eduard Fumás, Chief Technology Officer at Alea, with their VAPT completion certificate.

Eduard Fumás, Chief Technology Officer at Alea said, “At Alea, security is at the core of everything we do. Our commitment to creating a secure, robust and scalable API solution sets a new standard in the iGaming industry, where data protection and system integrity are critical. Partnering with Continent 8 has been an important step for us in proactively safeguarding our platform and reinforcing the trust our partners place in us. This collaboration ensures that we continue to deliver a reliable, secure API experience to our clients. We’re proud to work with a partner that shares our dedication to cybersecurity excellence.”

Patrick Gardner, Chief Security Officer at Continent 8 said, “Alea’s three principles of security, scalability and robustness resonate with Continent 8. Given the number of APIs Alea is using, their proactive approach to assessing their business and guaranteeing security for its partners is imperative.

“It’s great to be supporting Alea; we encourage all businesses in this industry to take the cybersecurity threat seriously.”

Vulnerability Assessment and Penetration Testing (VAPT) service enables the independent gaming commission to test IT infrastructure for vulnerabilities

Continent 8 Technologies, the leading provider of managed hosting, connectivity, cloud and cybersecurity solutions for the tribal gaming industry, supports Cherokee Tribal Gaming Commission (TGC) with its proven Vulnerability Assessment and Penetration Testing (VAPT) services.

The Cherokee Tribal Gaming Commission is the independent tribal gaming regulatory authority established in 1993 under Chapter 16 of the Cherokee Code of the Eastern Band of Cherokee Indians (EBCI).Charged with the duty to ensure fairness and integrity of the gaming activities within its facilities, the commission enlisted Continent 8, and its cybersecurity division, C8 Secure, to conduct pen testing.

Cherokee Continent 8 Partnership

The VAPT service provides a comprehensive security assessment of an organizations infrastructure and applications. Often mandated by regulation, it helps organizations measure the real-world effectiveness of their security controls and incident response capabilities. Additionally, the service provides actionable insights, including prioritized recommendations and industry best practices to address identified vulnerabilities and strengthen overall cybersecurity posture.

Emra Arkansas, Executive Director at Cherokee Tribal Gaming Commission said: We are sincerely grateful to Continent 8, especially Patrick Gardner, Anthony Engel and Jerad Swimmer, for their partnership and recognition of our ongoing cybersecurity initiatives. The Cherokee Tribal Gaming Commission remains firmly committed to protecting not only our critical infrastructure but also the sovereignty that underpins our regulatory authority. In an era of growing cyber threats, safeguarding Tribal IT systems is more than a technical priority, it is a sovereign responsibility. With Continent 8s trusted expertise, we are proud to set a higher standard for cybersecurity in Indian Country, ensuring our operations remain secure, resilient and self-determined.

Patrick Gardner, Chief Security Officer at Continent 8 said:In response to todays evolving cyber threat landscape, the Cherokee Tribal Gaming Commission is working to establish a new standard in cybersecurity and we are proud to support this important initiative. Their proactive efforts to safeguard critical infrastructure reflect a deep and ongoing investment in cybersecurity resilience.”

Jerad Swimmer, Regional Sales Director at Continent 8 added: “It was a pleasure collaborating with the Cherokee Tribal Gaming Commission in conducting a comprehensive evaluation of their IT infrastructure. Their team has shown a tremendous awareness of the escalating cybersecurity challenges within the tribal gaming sector. It is encouraging to see both enterprises and regulatory authorities actively enhancing their cybersecurity measures.”

For more information on how Continent 8 can support your cybersecurity initiatives or to schedule a no-obligation Cybersecurity Readiness Consultation, contact Regional Sales Director, Jerad Swimmer, at jerad.swimmer@continent8.com.

100%

Compliance Achieved

0

Cybersecurity Incidents Recorded

25+

Security Controls Validated

<30

Days Audit Turnaround

Continent 8’s Compliance Audit and Vulnerability Assessment and Penetration Testing (VAPT) services facilitate the supplier’s annual licensing obligations in the Keystone State.

The Customer

ODDSworksODDSworks, a leader in Remote Gaming Server technology and interactive content, specializes in delivering world-class gaming content and interactive technologies for regulated and real-money gaming markets. The ODDSworks game portfolio features a diverse array of proprietary and third-party titles.

As a licensed supplier under the Pennsylvania Gaming Control Board (PGCB), ODDSworks was required to conduct and submit a thorough audit of its cybersecurity measures for approval. ODDSworks chose its existing data center hosting partner, Continent 8, the leading provider of infrastructure and cybersecurity services to the iGaming and online sports betting sector, to design and implement an extensive regulatory compliance service, ensuring the content provider successfully met its regulatory requirements.

The Challenge

As an existing licensee offering third-party content to the online casino market, ODDSworks’ technology was already in compliance with the PGCB’s cybersecurity requirements. However, the regulatory body mandated ODDSworks to conduct an annual cybersecurity audit.

The primary challenge was selecting a cybersecurity services provider that was both capable and approved by the PGCB. The regulator is among the most stringent in the US regarding cybersecurity, requiring operators and suppliers to adhere to standards such as:

  • Acquiring and deploying Intrusion Detection Systems (IDS) and Intrusion Prevention Systems (IPS) solutions
  • Ensuring virtual machines are dedicated to a single online function
  • Verifying that all virtual machines are managed under a separate hypervisor
  • Acquiring comprehensive anti-virus, malware and ransomware protection for all virtual machines
  • Conducting vulnerability scanning
  • Implementing a log management solution to ensure audit logs of user activities, exceptions and information security events are stored and accessible to support investigations and access control monitoring.

The Solution

The audit was conducted by ODDSworks’ existing infrastructure partner, Continent 8 and its specialized cybersecurity division, C8 Secure. They utilized their Compliance Audit and  Vulnerability Assessment and Penetration Testing (VAPT) services to assess ODDSworks’ provisions in accordance with the requirements established by the PGCB.

  • Compliance Audit: The service identifies, assesses and mitigates potential cybersecurity risks while ensuring adherence to market and jurisdictional regulatory requirements. Compliance Audit safeguards organizations, builds trust with stakeholders and stays ahead of compliance requirements in an increasingly complex regulatory landscape.
  • VAPT: The service provides comprehensive security assessments of an organization’s infrastructure and applications. VAPT helps organizations achieve regulatory compliance and/or understand their attack surface area, providing a strong foundation for strengthening security posture.

The Benefits

Following the completion of the Compliance Audit and VAPT services, Continent 8 and C8 Secure identified cybersecurity vulnerabilities related to third-party platforms. As a result, ODDSworks required the third-party developers to implement necessary upgrades to comply with the iGaming supplier’s compliance standards.

The audit and VAPT reports were submitted to, and approved by, the PGCB.

Project Conclusion

Continent 8’s comprehensive regulatory compliance services have strengthened ODDSworks’ cybersecurity framework by validating existing measures, refining operational processes and ensuring their systems are well-equipped to meet evolving regulatory and security requirements.

To date, ODDSworks is pleased to report the absence of cybersecurity incidents and looks forward to continued collaboration with Continent 8 on various cybersecurity initiatives.

Steven DeMar, Executive VP at ODDSworks, said: “At ODDSworks, we are taking cybersecurity seriously – the industry is under attack. Continent 8 has done an incredible job of supporting us through our cybersecurity audit in the state of Pennsylvania. We were impressed by the speed at which the audit was planned, undertaken and reported on, as well as its scope and depth.

“We already knew that Continent 8 was at the top of its game having used its hosting solutions in other US states, but its cybersecurity audit for us shows that it really does set the standard for others to follow.”

Patrick Gardner, Chief Security Officer at Continent 8, said: “Cybersecurity is a hot topic in the online and land-based gaming industry, and ODDSworks are an example of a company that is prioritizing cybersecurity.

“Having cybersecurity provisions in place is not only a must when it comes to protecting the organization, but also when it comes to compliance. Pennsylvania is setting the standard when it comes to protecting the iGaming market.”

Download the case study here. For more information on how to meet your jurisdiction’s regulatory cybersecurity requirements, visit continent8.com or contact sales@continent8.com.  

Continent 8’s Vulnerability Assessment and Penetration Testing, Security Audit and Vulnerability Scan services enable Alea to further strengthen the security and resilience of its iGaming platform

Continent 8 Technologies, the leading provider of global managed hosting, connectivity, cloud and cybersecurity solutions for the iGaming and online sports betting industry, announces that it has expanded its cybersecurity collaboration with Alea.

Alea Partnership
Patrick Gardner, CSO at Continent 8, presents the VAPT completion certificate to Eduard Fumás, CTO of Alea, and the Alea team at ICE Barcelona 2025.

Building on its current programme of Vulnerability Assessment and Penetration Testing (VAPT) services with Continent 8, Alea – the award-winning casino game aggregator – has deepened its partnership with Continent 8 and its cybersecurity division, C8 Secure, by integrating Security Audit and Vulnerability Scan (V-Scan) services. This strategic initiative further enhances Alea’s cybersecurity posture and underscores the company’s ongoing investment in the resilience and integrity of its infrastructure.

The expanded cybersecurity assessment programme delivers a wide range of benefits for Alea and its operator network, including:

Eduard Fumás, CTO at Alea: “Security is built into everything we do at Alea. We’ve always believed that operators and their players deserve the highest level of protection. This is why we’ve invested in strong encryption, fraud prevention tools and a robust infrastructure from day one.

“Working with Continent 8 has helped us put that commitment to the test. Their expertise allows us to validate and strengthen our systems with confidence. We’re proud of how far we’ve come together, and even more excited about what’s next as we keep raising the bar and building a platform that our partners can trust completely.”

Patrick Gardner, Chief Security Officer at Continent 8 added: “As Alea continues to grow and expand, its proactive commitment to maintaining a secure iGaming aggregator platform becomes paramount. In our ongoing collaboration with Alea, we remain dedicated to fostering and supporting their cybersecurity initiatives – ensuring that both Alea and its extensive partner ecosystem stay protected, resilient and prepared.”

Continent 8 will be exhibiting at SBC Summit Lisbon, from 16-18 September at Stand C80. To arrange a show meeting and explore best practices and strategies for advancing your organisation’s cybersecurity initiatives, email sales@continent.com or fill out our Contact Us page.

Key highlights:

In the iGaming and online sports betting industry, where cybersecurity breaches can result in unauthorised access, identity theft, account takeovers, operational disruptions and reputational damage, MFA is an essential security measure. It’s also mandated for the regulated Brazilian iGaming market, where operators must submit proof of compliance.

Luana

In this blog, Luana Monje, Brazil-based Sales Executive at Continent 8 Technologies, explores the significance of MFA in Brazil’s exciting market, highlighting its role as both a regulatory cybersecurity requirement, outlining key considerations when selecting an effective authentication platform, and showcasing Continent 8’s passwordless MFA solution designed to deliver the most seamless single-step PIN experience.

What is multi-factor authentication?

According to the Secretariat of Prizes and Bets (SPA) and the Ministry of Finance’s (MF) technical and cybersecurity guidelines for Brazil’s betting systems (Ordinance No. 722, available in Portuguese), MFA is defined as:

A type of authentication that uses two or more of the following elements to verify a user’s identity: information known only to the user, such as a password, a pattern, or answers to challenge questions; an item owned by a user, such as an electronic token, a physical token, or an identification card; a user’s biometric data, such as fingerprints, facial or voice recognition.

Regulatory compliance with Brazil’s betting and gaming systems

First and foremost, Brazilian regulations require the implementation of MFA across several technical and cybersecurity requirements outlined in Ordinance No. 722. These requirements include:

Ordinance 722, Annex I, sections 12, 13 and 16 – Access to the betting system:

  1. In cases where the bettor forgets his username and/or password, the system must offer a multi-factor authentication process for the recovery or reset of the user and/or password, one of the factors being facial recognition.
  2. If any suspicious activity is detected, such as multiple unsuccessful login attempts, the betting system shall block the respective account. In this case, for the account to be unlocked, a multi-factor authentication process must be carried out, one of the factors being facial recognition.
  1. The betting system must require the bettor to have a multi-factor authentication:

a) at least once every 7 (seven) days; or

b) on the first access after a period of inactivity of more than 7 (seven) days.

Ordinance 722, Annex IV, section 25f – Technical Controls, DNS requirements:

25 – The following requirements apply to servers used to resolve Domain Name System (DNS) queries in association with the betting system:

f) multi-factor authentication must be in place

MFA provides a layer of cybersecurity that significantly mitigates the risk of unauthorised access, thereby safeguarding sensitive data and personal information.

Evaluating the right MFA technology for iGaming operations

With MFA being a regulatory requirement in Brazil, iGaming and online sports betting operators need to evaluate which MFA options are most suitable for their operations. Here are some key considerations when assessing an MFA platform, and how Continent 8 can support your MFA journey.

Key Consideration The Continent 8 MFA Advantage
User experience Same passwordless, 2-second, single-step login – on all devices and browsers

99.9% of users log in within 2 seconds. Supports biometric auth in apps.

Our MFA solution ensures consistent user experiences across both app and browser platforms, while also offering the option of local biometric authentication for apps.

Compatibility / Operability 100% of devices, 100% of browsersOur MFA solution ensures complete independence from hardware or operating systems, enabling compatibility across all devices and platforms.

By providing our solution through the same browser interface as the operator’s service, or by embedding the technology directly into the operator’s native app, we support:

  • 100% of devices and browsers
  • 100% of users
  • 100% of the time
Login success rate 99.93% login success or higherOur MFA platform streamlines the login process to a passwordless, single user step. The system is capable of operating with either a PIN or biometric authentication, providing users with flexibility and a reliable fallback across any device or browser.

Each additional step increases the potential for user error, and every dependency (such as downloads, installations, mobile phones, cellular networks, or username entry) introduces a potential point of failure for both users and the system.

Our platform achieves a 99.93% login success rate in consumer-facing applications, using either a 4-digit PIN or device-based biometric authentication where available.

Our platform also attains a 99.997% success rate in action (transaction) authentication.

There is no difference in success rates between mobile and tablet/laptop devices, as the system does not rely on the presence of a mobile device.

Registration success rate +18% in player registrations, 20% boost in profitsOur MFA solution’s enrolment process simply requires users to select a 4-digit PIN. This procedure does not require any permissions, downloads, plug-ins, imported keys or configurations, thereby eliminating registration failures. The enrolment can be completely invisible and take place during customer registration.

User process – on any device or browser:

  1. Choose a PIN
  2. SUCCESS

The result: +18% increase in user registrations which can boost profits by up to 20%.

Support costs 90% savings in support costs

Our MFA solution minimises support-related expenses and resources with a self-sufficient service. For example, this platform eliminates the need for password reset assistance – accounting for up to 60% of support desk inquiries, costing an estimated $15-70 per call – and customer validation.

MSSP services 360-degree support

As an MSSP, we offer comprehensive end-to-end support for seamless evaluation, deployment, and ongoing assistance by:

  • Managing the enrolment and remote blacklisting of devices
  • Authenticating and digitally sign any action/transaction for security/assurance and meet modern banking standards
  • Authenticating inbound callers to support/help desks
  • Authenticating users on secondary devices such as kiosks or point-of-sales (PoS) installations
  • Enabling the rapid installation and enrolment of a mobile app initiated from the desktop
  • Combating bonus and referral fraud
Technology Minimal attack surface, no single point of failure

Our MFA solution employs advanced zero-knowledge proof of identity, ensuring a minimal trust surface and eliminating any single point of failure. Provides robust two-factor authentication, with the option of a software-only solution.

Data privacy Zero information required

Our MFA solution does not require any Personally Identifiable Information (PII) from the end user. Instead, we only need a unique identifier, which may be a hash of a mobile number, email address, or username, thereby ensuring the solution’s adaptability to various identity schemes.

 

Future-proofing Brazil’s iGaming market with advanced seamless authentication

The iGaming and online betting industry is constantly evolving, with new technologies and threats emerging regularly. Multi-factor authentication is an essential component of future-proofing betting and gaming platforms against these evolving risks. By integrating advanced authentication methods, iGaming and online sports betting operators can stay ahead of cyber threats and continuously protect their systems and players’ data.

How Continent 8 can help your business implement MFA

Continent 8 is committed to supporting businesses in the iGaming and online sports betting industry with their cybersecurity needs. Our team of experts works closely with you to design and implement tailored MFA solutions that align with your regulatory requirements and business objectives.

To learn more about Continent 8’s MFA solution, contact Luana at luana.monje@continent8.com.

Jerad Swimmer, Regional Sales Director at Continent 8 Technologies, explores the benefits of a cybersecurity checklist to safeguard your tribal gaming operations against emerging cyber threats and attacks.

Jerad

Safeguarding your business can be daunting, and you might be asking yourself ‘where do I begin?’ To address this, we have prepared a cybersecurity checklist to help you identify possible weaknesses.

First, let us set the scene with the current state of play and why you need to prioritize cybersecurity in today’s world.

Understanding the current cyber threat landscape in tribal gaming

The tribal gaming industry is a vibrant and vital part of many Native American communities, providing not only entertainment but also significant economic benefits. However, this industry is increasingly falling under the crosshairs of sophisticated cybercriminals. These bad actors aim to disrupt operations, steal sensitive patron data and extort ransom payments. The stakes are high, with the potential impact extending beyond the casino floors to tribal governments, health services and community trust.

Cyber threats in tribal gaming are diverse and evolving. For example, ransomware attacks have become more prevalent, demonstrating a devastating capacity to bring operations to a standstill. A recent notable incident involved a ransomware attack that compromised all internet servers and data, with the attackers demanding up to $500,000 to restore services. These incidents highlight the urgent need for comprehensive cybersecurity measures tailored to the unique environment of tribal casinos.

The impact of cyber attacks on tribal casinos and communities

The consequences of a cyber attack on a tribal casino can be far-reaching. Beyond the immediate financial losses and operational disruptions, there is a profound impact on the trust and confidence of the community. Patrons expect their personal and financial information to be secure, and any breach can lead to a significant erosion of trust.

Key elements of a robust cybersecurity strategy for tribal gaming

To effectively combat cyber threats, tribal casinos need to adopt a multi-faceted cybersecurity strategy. This involves not just technological solutions but also organizational practices and policies. The foundation of such a strategy includes:

How Continent 8 can help – “Assume breach. Plan resilience.”

Continent 8, supported by our dedicated cybersecurity company, C8 Secure, is a trusted partner for tribal nations and gaming enterprises. Our cybersecurity services are tailored to meet the unique needs of tribal governments, regulators and casino operators.

Our capabilities include:

We are trusted by a diverse array of tribal gaming casinos and organizations, including ShowNation, Tachi Palace Casino Resort, among others.

DOWNLOAD THE COMPREHENSIVE CYBERSECURITY CHECKLIST NOW

Don’t wait for an incident to discover whether you’re vulnerable. By taking these proactive steps, tribal casinos can fortify their defenses, ensuring uninterrupted operations and maintaining the trust of their communities.

Secure your tribal gaming operations by accessing this detailed checklist.

Cybersecurity solutions for a safer tomorrow

Continent 8 provides comprehensive, multi-layered threat prevention, detection and response solutions to secure your tribal organization’s digital assets in the face of evolving cyber threats. For more information on how Continent 8 can support your cybersecurity initiatives, email sales@continent.com or fill out our Contact Us page.

As an AWS Solution Provider, Continent 8 also offers managed services, including Managed AWS Outposts and Managed Hybrid Networking, available via the AWS Marketplace

Continent 8 Technologies, the leading provider of global cloud hosting, connectivity and cybersecurity solutions for the iGaming and online sports betting industry, announces enhanced AWS support to facilitate the deployment and management of the latest generation AWS Outposts racks, enabling secure, ultra-low-latency hybrid cloud infrastructures.

The second-generation AWS Outposts, announced at the end of April 2025, offer significant performance enhancements over their predecessors, including faster processing, higher memory capacity and increased network bandwidth for on-premises workloads. Continent 8 enables customers to capitalise on these advancements through the following offerings:

Continent 8 has extensive experience with AWS Outposts, having provided comprehensive support to operators and suppliers with the initial generation of rack platforms. Today, Continent 8 is responsible for over 90% of AWS Outposts deployments within the regulated betting and gaming industry.

Justin Cosnett, Chief Product Officer at Continent 8, stated, “Our strategic partnership with AWS, along with our deep experience with the first-generation AWS Outposts technology, enables us to provide the requisite expertise for delivering seamless AWS experiences. With the launch of the latest generation of AWS Outposts, we are well-positioned to manage the betting and gaming industry’s ‘business as usual’, day-to-day operations and IT infrastructure needs, allowing customers to swiftly benefit from the platform’s latency and performance enhancements for their most demanding gaming projects.”

Continent 8 is a Gold sponsor of the AWS Community Day Malta on 30 May and will be running a session on ‘Future-ready cloud solutions: winning in regulated markets’. Contact sales@continent8.com to arrange a meeting at the event.

Let's work together.

GET IN TOUCH

Asia +65 3165 4649
Europe +44 1624 694625
Latin America +54 11 5168 5637
North America +1 514 461 5120