UKGC Affiliate Compliance: LCCP Implementation Checklist 2026

The UK Gambling Commission's LCCP makes operators directly accountable for affiliate conduct under Social Responsibility Code 1.1.2. The 2017 enforcement action against 888 (£7.8M fine) established the precedent that operators cannot delegate compliance to affiliates. This means your affiliate program, from recruiter selection to marketing copy approval, falls under direct regulatory scrutiny.

UKGC-licensed operators face a straightforward operational choice: build audit-ready compliance infrastructure for affiliates or face enforcement action. The regulator enforces two primary mechanisms: Social Responsibility Code 1.1.2 (operator accountability) and CAP Code Section 16 (administered by the Advertising Standards Authority). Non-compliance triggers a three-strikes management workflow that escalates from affiliate warnings to program termination.

The UKGC LCCP Framework

The Licence Conditions and Codes of Practice (LCCP) is the operating manual for UKGC-licensed operators. Unlike post-launch guidance, LCCP conditions are contractual obligations embedded in your operator licence. Non-compliance does not result in warnings; it results in license suspension or revocation. The framework consists of two tiers: mandatory licence conditions and industry-agreed codes of practice. Affiliate management falls under both.

Per UKGC LCCP, operators must establish written procedures for affiliate onboarding that include identity verification (KYC), financial crime screening, and mandatory review of marketing materials before publication. The framework requires operators to demonstrate competence in affiliate recruitment, contract drafting, marketing approval workflows, and affiliate performance monitoring. Affiliates are not treated as independent contractors; they are treated as extensions of your operational infrastructure subject to the same compliance obligations as your corporate marketing team.

Social Responsibility Code 1.1.2: Operator Accountability

SRC 1.1.2 states that operators must ensure affiliates comply with all relevant regulations and LCCP conditions. This is the foundation of UKGC enforcement. The code creates a direct liability chain: if your affiliate violates gambling marketing rules, CAP Code, or Gambling Act 2005 provisions, the operator is in breach of SRC 1.1.2. This explains why the 2017 888 enforcement action targeted the operator, not individual affiliates. The regulator held 888 liable for affiliate-generated violations spanning eight years.

In operational terms, SRC 1.1.2 requires documented approval processes, performance audits at least quarterly, and a formal escalation mechanism when affiliates engage in prohibited marketing. Per ASA CAP Code Section 16, the code specifically prohibits false or misleading claims (e.g., 'guaranteed winnings'), marketing to under-25s, promotion of gambling as a solution to financial hardship, and failure to display problem gambling messaging. Your compliance officer must be able to produce audit logs proving affiliate review and approval for every marketing campaign your affiliates run.

CAP Code Section 16: Marketing Standards Administered by ASA

The Advertising Standards Authority (ASA) administers the Committee of Advertising Practice (CAP) Code Section 16, which governs gambling advertising in the UK. While the ASA is technically a non-statutory body, its rulings carry regulatory weight: the UKGC references ASA adjudications in enforcement decisions, and repeated ASA violations can trigger UKGC formal investigations. Unlike MGA-licensed operators who face different marketing rules, UKGC operators must comply with both CAP Code AND LCCP marketing conditions simultaneously.

• No marketing to under-25s: Marketing materials must not be primarily targeted at persons under 25 years old. Age verification is mandatory for digital channels. Per FTC Endorsement Guides, this applies to all affiliate endorsements and sponsored content.
• Problem gambling messaging: All advertising must include a risk warning and provide contact details for support services (Gamble Aware, National Problem Gambling Clinic).
• No misleading claims: Advertisements must not claim gambling offers financial security, employment income, or solutions to financial problems.
• No sports person endorsements by minors: If your affiliate uses sports personalities as endorsers, they must be verified as 25+ and marked with endorsement disclosures.
• No social norming: Advertising must not suggest gambling is a normal activity for the majority of adults.
• No testimonials of specific winnings: Affiliate-generated content claiming win amounts must include disclaimers on volatility and odds.
• Responsible gambling codes: If your affiliate offers bonus codes, the code name must not trivialize gambling (e.g., 'risk-free' is permitted only if genuinely risk-free).
• Implicit advertising: Native content, influencer posts, and affiliate blogs must include a clear '#ad' or '[ad]' disclosure per Performance Marketing Association Standards.

The 2017 Enforcement Landmark: 888 Holdings Case

In March 2017, the UKGC imposed a £7.8 million fine on 888 Holdings for affiliate marketing violations spanning 2008-2016. This was the largest single iGaming fine at that time and established the enforcement precedent for affiliate non-compliance. The regulator did not fine individual affiliates; it fined the operator for failing to implement adequate compliance controls. The investigation identified 888 affiliates running marketing campaigns that breached CAP Code Section 16, LCCP marketing conditions, and SRC 1.1.2 obligations.

Specific violations included: affiliate pages claiming '100% risk-free welcome bonuses' (misleading), affiliate content targeting under-25s without age verification, and affiliate blogs promoting gambling as a financial solution. 888's compliance failure was not limited to one rogue affiliate; it was systemic. The regulator found that 888 lacked centralized marketing approval processes, had no audit trail for affiliate materials, and did not conduct regular affiliate compliance reviews. This case became the template for all subsequent UKGC enforcement actions involving affiliates.

The 888 precedent created a regulatory baseline: UKGC-licensed operators must demonstrate proactive compliance management, not reactive response to violations. Since 2017, the UKGC has investigated and fined multiple operators for affiliate marketing non-compliance. The pattern is consistent: operators with documented compliance processes (audit logs, approval workflows, quarterly reviews) receive lighter enforcement action or avoid enforcement entirely. Operators with ad-hoc affiliate management face fines ranging from £500,000 to £2 million.

12-Point Affiliate Compliance Checklist

The following 12-point checklist translates UKGC LCCP, SRC 1.1.2, and CAP Code Section 16 requirements into operational workflows. Each item must be documented and auditable. Compliance officers should use this as a governance framework and conduct quarterly reviews to verify ongoing adherence.

1. Written Affiliate Agreements: All affiliate contracts must include explicit clauses referencing UKGC LCCP compliance, CAP Code Section 16, and SRC 1.1.2. The agreement must specify that the operator reserves the right to audit marketing materials, terminate affiliates for non-compliance, and escalate violations to regulatory authorities if necessary.
2. KYC and Financial Crime Screening: Every affiliate recruit must complete identity verification (name, DOB, address, business registration if applicable) and financial crime screening (PEP checks, sanctions screening). Document the screening results and retain records for 6 years minimum.
3. Affiliate Marketing Approval Workflow: Establish a documented process requiring affiliates to submit marketing materials (landing pages, email templates, social media posts, blog content) to your compliance team BEFORE publication. Set a maximum approval turnaround time (e.g., 48 hours) and maintain an approval log.
4. Age Verification for Digital Channels: If your affiliate uses digital advertising (PPC, social media, display networks), the affiliate must implement age verification via platform controls (Facebook age targeting, Google Ads demographic targeting). Document targeting parameters in a shared audit log.
5. Problem Gambling Messaging Standards: Create a templated disclaimer and problem gambling messaging that affiliates must include in all marketing materials. Provide affiliates with pre-approved Gamble Aware logos and contact links. Audit compliance quarterly.
6. Endorsement Verification: If affiliates use sports personalities, celebrities, or micro-influencers as endorsers, verify their age (25+) and document the verification. Require affiliates to tag endorsements with '#ad' or '[ad]' disclosures per IAB Performance Marketing Standards.
7. Bonus Code Naming Review: If affiliates generate bonus codes, review the code name and promotional claim for compliance. Reject codes with terms like 'risk-free' unless genuinely risk-free. Maintain a register of approved bonus codes.
8. Affiliate Reporting Dashboard: Implement a real-time dashboard where affiliates report marketing channel, audience demographics, estimated reach, and content samples. This allows continuous monitoring without manual audit requests.
9. Quarterly Compliance Audits: Schedule formal reviews of 20-30% of active affiliates each quarter, rotating through your entire affiliate portfolio annually. Audit their landing pages, email campaigns, and social media. Document findings and corrective actions.
10. Three-Strikes Escalation Process: Define clear enforcement tiers. First violation = written warning and mandatory retraining. Second violation = 30-day suspension pending retraining. Third violation = termination. Document each strike and the corrective action required.
11. Affiliate Training and Certification: Require all new affiliates to complete a compliance certification covering LCCP, SRC 1.1.2, CAP Code Section 16, and problem gambling messaging. Annual refresher training is mandatory. Maintain training logs.
12. Regulatory Reporting and Incident Response: If an affiliate violates rules and the violation is identified by ASA, another regulator, or a customer complaint, document the incident, notify the UKGC if required, and report the affiliate termination in your next UKGC compliance submission.

Three-Strikes Management Workflow

The three-strikes workflow operationalizes SRC 1.1.2 enforcement. When an affiliate violates marketing rules, the escalation must be documented, time-stamped, and proportionate. This approach satisfies UKGC expectations by demonstrating a fair, transparent compliance process. Regulators expect operators to escalate serious violations (e.g., marketing to minors) immediately to termination; milder violations (e.g., missing problem gambling messaging) should receive corrective opportunities first.

1. Strike 1 - Written Warning: Affiliate violates a CAP Code Section 16 rule (e.g., age targeting fails, problem gambling messaging missing). Compliance officer issues a formal written notice within 48 hours. The notice specifies the violation, the rule violated, and the required corrective action. Affiliate has 7 days to remediate. The operator documents the warning in a compliance tracking system.
2. Strike 1 - Corrective Training: Affiliate completes a refresher training module on the specific violation category (e.g., if violation was misleading claims, affiliate repeats the 'Honest Advertising' module). Training completion is logged. Affiliate may remain active during training, but new marketing materials require enhanced approval (24-hour turnaround, legal review).
3. Strike 2 - Suspension and Re-Certification: Affiliate repeats the same violation or violates a different CAP Code or SRC 1.1.2 rule within 90 days. Compliance officer issues a 30-day suspension notice. Affiliate must complete full compliance certification (all modules, not just the refresher). Marketing materials must be resubmitted and approved before any resumption.
4. Strike 3 - Termination: Affiliate violates rules a third time within 12 months, OR commits a high-severity violation on the first offense (e.g., marketing to under-18s, false earnings claims). Compliance officer issues a termination notice with immediate effect. All affiliate links are deactivated. Termination is documented in the affiliate contract audit trail and reported in the next UKGC submission.
5. Serious Violations - Immediate Escalation: Certain violations skip the three-strikes process and trigger immediate termination: false claim of UKGC licensing, promotion of unlicensed gambling products, marketing to prohibited jurisdictions, or money laundering indicators. These are reported to UKGC within 24 hours.

FAQ: UKGC LCCP Affiliate Compliance

UKGC affiliate compliance is operationally demanding but non-negotiable. The framework is clear: operators are liable for affiliate conduct, pre-approval of marketing materials is mandatory, and regular audits are required. The three-strikes workflow provides a fair, documented enforcement mechanism that satisfies regulator expectations. The 2017 888 enforcement action and subsequent UKGC guidance establish the baseline. Operators who implement the 12-point checklist and document their compliance processes reduce enforcement risk and demonstrate competence to regulators.

The compliance obligation extends beyond legal risk; it is operational infrastructure. Affiliate management platforms with built-in approval workflows, audit logging, and training management accelerate compliance execution and reduce manual overhead. Quarterly audits, documented escalation workflows, and affiliate certification programs transform affiliate compliance from a cost center into a measurable governance process. For UKGC-licensed operators, this is now standard practice.