On May 2, 2024, the Secretariat of Prizes and Bets (SPA) and the Ministry of Finance (MF) issued Ordinance No. 722 (link here in Portuguese). This set of regulations outlines the essential technical and security criteria that iGaming and online sports betting operators must adhere to within six months of obtaining their gaming licenses.
In a series of blogs over the coming months, Luana Monje, Sales Executive at Continent 8 Technologies, will examine the various requirements for regulated iGaming in Brazil. First up, she examines the penetration testing requirement, along with other cybersecurity considerations, in more detail.
Ordinance 722, Annex IV, section 41 – Penetration testing: The purpose of penetration testing is to exploit any weaknesses discovered during the vulnerability assessment in any publicly exposed applications or systems that host applications that process, transmit and/or store sensitive information.
Executing thorough penetration testing is a testament to an organisation’s dedication to safeguarding user data. Ordinance 722 defines penetration testing as systematically challenging the strength of network and application layers so that operators and suppliers can identify and rectify vulnerabilities.
Our Vulnerability Assessment and Penetration Testing (VAPT) services provide comprehensive security assessments for a customer’s infrastructure and applications. The VAPT solution enables organisations to achieve regulatory compliance and understand their attack surface area, providing a strong foundation for strengthening security posture.
Key benefits include:
VAPT use case: Read how Continent 8 Technologies supports ODDSworks with cybersecurity audit and vulnerability assessment penetration test services. |
Ordinance 722 offers a set of ground rules from which iGaming and online sports betting operators and suppliers should start. Beyond the suggested checklist, operators and suppliers should also consider a holistic approach that ensures end-to-end protection against any security and cyber threat. A 360-degree defense strategy includes:
By referencing the SPA and MF’s Ordinance 722 policies and partnering with an experienced and trusted solutions provider like Continent 8, operators and suppliers can deploy multi-defense, multi-layer security protection strategies for their iGaming and online sports betting platform. This approach enables them to comply with Brazil’s latest technical and security regulations while demonstrating their commitment to providing secure and trustworthy gaming environments and experiences.
Continent 8 Technologies, the trusted managed hosting, connectivity, cloud and cybersecurity partner to the global iGaming and online sports betting industry for over 25 years, is live in every major regulated Latin American (LATAM) jurisdiction, including Brazil.
Operating out of the LATAM region since 2020, we offer operators and suppliers access to state-of-the-art data centers, connectivity to a global private network featuring 100+ locations across four continents and best-in-class managed and professional services to support the most demanding iGaming and online sports betting requirements.
Discover why Continent 8 is the go-to infrastructure and cybersecurity provider for leading LATAM operators and suppliers such as Betcris, Boldt, Bplay and Vibra Gaming, and learn how we ensure the seamless implementation of compliant and secure infrastructures so that your Brazilian gaming operations are live from day one.
For more information on how Continent 8 can support your organisation’s regulatory and cybersecurity requirements, contact Luana at luana.monje@continent8.com.
Em 2 de maio de 2024, a Secretaria de Prêmios e Apostas (SPA) e o Ministério da Fazenda (MF) emitiram a Portaria nº 722. Este conjunto de regulamentos define os critérios técnicos e de segurança essenciais que os operadores de iGaming e de apostas desportivas online devem cumprir no prazo de seis meses após a obtenção das suas licenças de jogo.
Em uma série de blogs nos próximos meses, Luana Monje, Executiva de Vendas da Continent 8 Technologies, examinará os vários requisitos para o iGaming regulamentado no Brasil. Em primeiro lugar, ela examina o requisito de teste de penetração, juntamente com outras considerações de segurança cibernética, em mais detalhes.
Portaria 722, Anexo IV, secção 41 – Testes de penetração: O objetivo dos testes de penetração é explorar quaisquer pontos fracos descobertos durante a avaliação de vulnerabilidades em quaisquer aplicações ou sistemas expostos publicamente que alojem aplicações que processem, transmitam e/ou armazenem informações sensíveis.
A realização de testes de penetração completos é uma prova da dedicação de uma organização à proteção dos dados dos utilizadores. A Portaria 722 define os testes de penetração como um desafio sistemático à força das camadas de rede e de aplicação para que os operadores e fornecedores possam identificar e retificar vulnerabilidades.
Os nossos serviços de Avaliação de Vulnerabilidades e Testes de Penetração (VAPT) fornecem avaliações de segurança abrangentes para as infra-estruturas e aplicações de um cliente. A solução VAPT permite que as organizações atinjam a conformidade regulamentar e compreendam a sua área de superfície de ataque, fornecendo uma base sólida para reforçar a postura de segurança.
As principais vantagens incluem:
Caso de utilização VAPT (em inglês): Leia como a Continent 8 Technologies apoia a ODDSworks com serviços de auditoria de cibersegurança e teste de penetração de avaliação de vulnerabilidades.. |
A portaria 722 oferece um conjunto de regras básicas a partir das quais os operadores e fornecedores de iGaming e de apostas desportivas em linha devem começar. Para além da lista de verificação sugerida, os operadores e fornecedores devem também considerar uma abordagem holística que garanta uma proteção completa contra qualquer ameaça à segurança e à cibersegurança. Uma estratégia de defesa de 360 graus inclui (ligações de produtos em inglês):
Ao fazer referência às políticas da SPA e da Portaria 722 do MF e fazer parceria com um provedor de soluções experiente e confiável como o Continente 8, operadores e fornecedores podem implantar estratégias de proteção de segurança multi-defesa e multi-camadas para sua plataforma de apostas esportivas iGaming e online. Essa abordagem permite que eles cumpram as mais recentes regulamentações técnicas e de segurança do Brasil, ao mesmo tempo em que demonstram seu compromisso em fornecer ambientes e experiências de jogos seguros e confiáveis.
A Continent 8 Technologies, parceira confiável de hospedagem gerenciada, conetividade, nuvem e segurança cibernética para a indústria global de iGaming e apostas esportivas online há mais de 25 anos, está ao vivo em todas as principais jurisdições regulamentadas da América Latina (LATAM), incluindo o Brasil.
Operando a partir da região LATAM desde 2020, oferecemos aos operadores e fornecedores acesso a centros de dados de última geração, conetividade a uma rede privada global com mais de 100 locais em quatro continentes e os melhores serviços gerenciados e profissionais da categoria para apoiar os requisitos mais exigentes de iGaming e apostas desportivas online.
Descubra por que o Continente 8 é o provedor de infraestrutura e segurança cibernética para os principais operadores e fornecedores da LATAM, como Betcris, Boldt, Bplay e Vibra Gaming, e saiba como garantimos a implementação perfeita de infraestruturas compatíveis e seguras para que suas operações de jogos brasileiras estejam ao vivo desde o primeiro dia.
Para obter mais informações sobre como o Continente 8 pode apoiar os requisitos regulatórios e de segurança cibernética da sua organização, visite Continent8.com ou contactar Luana em luana.monje@continent8.com.
Our Senior Cloud Solutions Architect Matteo Gabrielli wrote a brief blog of Continent 8’s LATAM marketing and services.
The Latin American (LATAM) iGaming and online sports betting market is growing rapidly, presenting both opportunities and unique technical challenges. As operators and suppliers expand into this market, they face critical decisions about infrastructure, compliance, and scalability. At Continent 8 Technologies, we guide customers through this complex landscape, leveraging our deep expertise in AWS (Amazon Web Services) solutions, on-premises infrastructure, networking, cybersecurity, and iGaming-specific technologies.
One of the key characteristics of iGaming operations in the LATAM market is the approach many customers take to infrastructure deployment. While regulations vary across the region, many operators choose to serve the entire LATAM market from a single AWS location, such as US East (Virginia), US West (Oregon), or South America (São Paulo).
This centralized model, chosen by some of our customers, offers advantages in terms of operational simplicity and cost-effectiveness. However, it also requires careful planning to ensure performance, compliance, and scalability across diverse geographic and regulatory landscapes.
With over 25 years in the iGaming industry and a network spanning more than 100 locations across four continents, Continent 8 brings a unique blend of global reach and local knowledge to the table. Our presence in 30 US states, multiple Canadian provinces, and key locations across LATAM, Europe, and Asia allows us to offer comprehensive compliant solutions.
What sets us apart is our ability to be a single source provider for all regulated locations. Our team has a deep understanding of AWS architectures, on-premises infrastructure, networking intricacies, cybersecurity best practices, and hosting requirements specific to the iGaming industry. This expertise translates into consistent, high-quality implementations across your entire infrastructure stack.
In the fast-changing iGaming and online sports betting landscape, generic solutions often fall short. That’s why we approach each customer engagement with a fresh perspective, considering not just current needs but future growth trajectories.
Our solutions include:
Our cloud offering is purpose-built for iGaming, ensuring regulatory compliance while providing the flexibility and scalability needed in dynamic markets. It’s an ideal choice for operators looking for a fully managed, iGaming-specific solution.
Often, the best solution involves a strategic combination of Continent 8 and AWS resources, optimized for performance, compliance, and cost-effectiveness. This approach allows you to leverage the strengths of both platforms.
For those preferring an AWS-focused approach, we design and implement solutions that take full advantage of AWS capabilities, complemented by our industry-specific expertise.
Our goal is not to push one platform over another, but to architect the solution that best fits your unique needs and growth plans.
One of the most common pitfalls we see in global expansions is the tendency to replicate entire deployments across different jurisdictions. While this approach might seem straightforward, it often leads to high costs, maintenance challenges, and scalability issues down the line.
Instead, we advocate for a more strategic approach:
We break down your infrastructure into modular components, creating systems that can be easily replicated or scaled independently. Crucially, this design considers which components are subject to regulation and which are not, allowing for more efficient expansion into new markets without unnecessary duplication or compliance risks.
We design solutions that centralize core components while ensuring local regulatory compliance. This strikes the right balance between operational efficiency and legal requirements.
The iGaming regulatory landscape is constantly evolving. Our architectures are designed with flexibility in mind, allowing you to adapt quickly to new requirements or market opportunities.
At Continent 8, we offer more than just infrastructure. Our team provides comprehensive support throughout your journey:
Operating across the LATAM region presents unique performance challenges. Latency, data sovereignty, and varying regulatory requirements all come into play. Our approach combines strategic use of the Continent 8 purpose-built network, AWS services, custom content delivery solutions, and optimized network routing to ensure a seamless user experience across the region.
Navigating the regulatory landscape in LATAM requires a nuanced understanding of both regional and country-specific requirements. Our “Regul8 Guardrails” solution embeds compliance checks directly into your cloud infrastructure, ensuring that you maintain regulatory alignment even as you rapidly scale and expand.
Our regulatory affairs team’s proactive approach means you are not just compliant today, but well-positioned for the regulatory landscape of tomorrow. They work closely with our solution architects and account teams to ensure that compliance considerations are built into every aspect of your infrastructure.
The most critical aspect of our approach is the focus on long-term optimization. The infrastructure decisions you make today will have profound implications for your operational efficiency and competitiveness in the years to come.
Our team continuously monitors your systems, identifying opportunities for cost savings, performance enhancements, and architectural improvements. We have helped clients achieve significant cost reductions through strategic workload placement, rightsizing of resources, and implementation of scalable solutions tailored to the unique traffic patterns of iGaming applications.
As you plan your entry or expansion in the flourishing LATAM iGaming market, remember that the right infrastructure strategy can be a powerful competitive advantage. At Continent 8, we bring a unique combination of iGaming industry knowledge, AWS expertise, on-premises infrastructure experience, networking proficiency, and cybersecurity best practices to every engagement.
We are not just here to provide technology – we are here to be your strategic partner in navigating the complexities of global expansion. From initial architecture design to ongoing optimization and support, our team is committed to your long-term success in LATAM and beyond.
Ready to craft a future-proof strategy for your iGaming operations? Let’s start a conversation about how we can align cutting-edge technology with your business objectives. Contact our team of experts at sales@continent8.com, and let’s build the foundation for your success in the dynamic LATAM market.
Learn more about our AWS solutions here.
Continent 8 Technologies, the trusted partner and provider of global managed hosting, connectivity, cloud and cybersecurity solutions to the regulated iGaming and online sports betting market, has expanded its partnership with Amazon Web Services (AWS), chosen as an official solutions provider in the Solution Provider Program (SPP) by AWS.
Over the past 25-plus years, Continent 8 has earned an unrivalled reputation for reliable infrastructure and connectivity, innovating, developing and providing customers with best-in-class managed and professional services to support the most demanding online requirements.
Now, as an SPP member, this enhanced AWS collaboration will enable Continent 8 to introduce a new range of services to simplify the management of AWS cloud environments and infrastructures. The new managed and professional services include:
Regulatory compliance is non-negotiable in the betting and gaming industry. The tailormade Regul8 Guardrails solution provides customers with customised designs and configurations for easy-to-integrate compliance across cloud environments while accelerating time-to-market and expansion into new jurisdictions.
Migrating and managing Kubernetes across different cloud environments can be difficult. The Kubernetes Everywhere service makes it easy for customers to manage their containerised deployments, ensuring consistent, resource-friendly and cost-effective operation across cloud environments, data centers, edge computing infrastructures and within AWS regions using Elastic Kubernetes Service (EKS).
Managing hybrid and multi-cloud networks is a complex task. By integrating Continent 8 and AWS networks, the managed network services address the connectivity challenges between on-premises infrastructures, AWS Outposts, enterprise networks and AWS Regions. This service ensures customers benefit from the most resilient and secure hybrid cloud connectivity path, away from the public Internet.
Continent 8 is the trusted advanced partner in delivering 90% of AWS Outposts to the biggest brands – including FanDuel and Hard Rock Digital – in the regulated betting and gaming market. Building upon this AWS Outposts portfolio, the new Managed AWS Outposts service streamlines the procurement, logistics, workload migration and ongoing management of AWS Outposts, allowing customers to focus on launch activities. Continent 8 continues to provide best-in-class connectivity and seamless access to all AWS Direct Connect (DX) on-ramp locations.
Complementing these new cloud offerings is a dedicated team of over 30 AWS-certified and AWS-trained experts available to deliver and support high-touch AWS solutions tailored to each customer’s unique requirements.
“The AWS Solution Partner Program milestone underscores Continent 8’s commitment to continuing its position as the service and solutions provider of choice to the iGaming and online sports betting market. Whether it’s hyperscale, hybrid, public or private cloud management, Continent 8 remains steadfast in delivering trusted, bespoke, best-practice and value-added cloud experiences for our customers.”
Extending AWS capabilities for regulated betting and gaming environments
Join Continent 8 and AWS in a rapid-fire webinar to discover the key considerations and best practices for extending, optimising and reimagining AWS hybrid and multi-cloud architectures for betting and gaming operations.
Continent 8 Technologies PR & Media Marketing Department contact: press@continent8.com
The International Gaming Standards Association (IGSA) is pleased to welcome Continent 8 Technologies, the award-winning global managed hosting, connectivity, cloud and cybersecurity solutions provider to the global online gaming industry, as its newest association member.
Continent 8, an IGSA Silver member, is a trusted industry partner for global leading brands in the iGaming and online sports betting market. With over 25 years of experience, Continent 8 brings unparalleled expertise to the association. Their well-respected regulatory and cybersecurity practices make them an obvious choice in supporting IGSA, advocating true industry standards for the gaming industry. As a member of the IGSA Cyber Resiliency Committee, Continent 8 will have an immediate impact, empowering suppliers, operators and regulators with best-practice recommendations to meet current and evolving regulatory and cybersecurity requirements.
Jeremie Kanter, Continent 8 Director of Regulatory Affairs said:
“Continent 8 and its dedicated cybersecurity company, C8 Secure, have helped our global network of operators and suppliers achieve sustainable, long-term success. This is largely due to our commitment to industry standards. We are excited to collaborate with the IGSA and industry peers to develop and establish comprehensive compliance and cybersecurity standards with the goal of elevating regulatory and cybersecurity excellence, performance and innovation across the gaming
industry.”
“IGSA is very excited to welcome Continent 8 to our membership. As a long-time champion of industry standards, they are intimately familiar with the regulatory and cybersecurity challenges, opportunities and requirements that today’s gaming stakeholders face,” said Mark Pace, IGSA President.
“We look forward to their participation within our Cyber Resiliency Committee and other various IGSA groups. We believe their contributions will be significant and of great value to the industry.”
For media inquiries, contact press@continent8.com
Continent 8 Technologies, the award-winning global managed hosting, connectivity, cloud and cybersecurity provider to the iGaming and online sports betting industry, augments its US offering having received approval in the state of Nevada.
The company has received two approvals from the Nevada Gaming Control Board (NGCB). The first authorizes Continent 8 to provide its cutting-edge services via its data center site located in the state, and the second allows it to service Nevada-licensed operations from its New Jersey site. This enables licensed iGaming operators and suppliers utilizing Continent 8’s state-of-the-art data center in Atlantic City to launch in the Silver State and benefit from zero-compromise connectivity, performance and latency for optimal user experiences.
Continent 8’s full suite of solutions designed to meet regulatory compliance in each state and jurisdiction is available to customers in Nevada. These solutions cover managed hosting, connectivity and cloud. This includes supporting hybrid cloud deployments with hyperscale partners like Amazon Web Services (AWS).
Continent 8 has consistently demonstrated its leadership in the industry with a first-to-market approach across North America. Working closely with regulators ensures that its customers are the first to go live when each state opens its doors to regulated iGaming and online sports betting for the first time. Continent 8 is live in 30 US states, with further launches in the pipeline.
This first-to-market approach, unrivalled regulatory experience and cutting-edge suite of solutions have seen Continent 8 emerge as the go-to infrastructure provider of choice for 95% of operators on the EGR US Power Rankings for 2024.
“Our bold and customer-centric approach has positioned us as the number one iGaming infrastructure provider for operators and suppliers targeting the US market, and adding Nevada to our growing network of states strengthens this position.
“That we have also uniquely secured approvals to service Nevada customers from both in-state and out-of-state is further evidence of how we provide our customers with solutions they simply can’t get elsewhere. And this has only been possible because of our close relationship with regulators and the prowess of our infrastructure.”