When Two Regulators Claim the Same License: What the Public Registers Actually Say About Jurisdictional Overlap

The query that brought us here is the congressional push for a probe into the Commodity Futures Trading Commission's claim of jurisdiction over prediction markets. We are not the desk to grade that specific fight. We do not hold CFTC enforcement filings in the analyst notebook, and we do not write what we cannot ground in a primary document.

What we can do is show you how jurisdictional overlap actually plays out when two regulators claim the same operator. The iGaming public record is unusually dense on this question. The fights are decided in license registers, deferred prosecution agreements, and annual reports — and the answers are not what the marketing suggests.

What Does "Jurisdictional Overlap" Look Like on an Operator's License Register?

It looks like a stack of separate permits, each issued by a different authority, each enforceable on its own terms. Flutter Entertainment holds full tier-1 licenses from the UKGC, the Malta Gaming Authority, New Jersey's DGE, and Ontario's AGCO — four regulators, four sets of obligations, one operator. None of these permits supersedes the others. None of them defers to the others. Each regulator can fine, suspend, or revoke without coordinating with the rest.

The UKGC public register lists 268 active online operators as of December 2024. Most of these names also appear on the MGA's parallel register. The two regulators have overlapping subject-matter jurisdiction over the same companies — and they exercise it separately. That is the baseline reality before any congressional debate about whose mandate covers what.

When a UK Operator Pays a UK Fine, Does the MGA Care?

The answer in practice is: not formally, but reputationally yes. The UKGC fined Sky Betting and Gaming, a Flutter brand, £1,170,000 on March 2, 2023 for social responsibility and anti-money laundering failings. The notice is on the UKGC enforcement page, dated and quantified to the pound. The MGA did not issue a parallel sanction against Flutter's Malta-licensed entity for the same conduct.

This is the model: each regulator enforces against the entity it licenses, and an enforcement action in one jurisdiction does not automatically translate into an enforcement action in another, even where the operator is the same group. The UKGC notice cited the British compliance failure. Malta's regulator continued the licensing relationship without public comment.

Has Any Operator Lost a License Because Another Regulator Acted First?

The honest answer is: rarely. The £17m Ladbrokes Coral regulatory settlement of August 17, 2022 was the largest UKGC penalty on the public register at the time. Entain — which owns the Ladbrokes and Coral brands — kept every other license it held. Gibraltar continued the relationship. Malta continued the relationship. The DPA settlement Entain reached with the UK CPS in December 2023, valued at £585m, came from a separate criminal investigation into a Turkey-facing business sold in 2017 — and again, no other regulator pulled paper.

The HGC enforcement office in Athens closes at 14:30 local time. We learned this trying to reach them about the Greek licensing chain.

What Is the Difference Between a Regulator Claiming Jurisdiction and a Regulator Enforcing?

Claiming jurisdiction is publishing a position paper. Enforcing is issuing a sanction with a number attached to it. The gap between the two is wide, and it is where most of the substantive editorial about regulatory overlap actually lives.

Bet365 was fined £582,120 by the UKGC on December 12, 2022. The notice is on the public enforcement page and names the Hillside subsidiary specifically. The company serves customers in 170 countries by its own disclosure. At least 168 of those countries' financial or gambling regulators did not act on the same conduct. That is not because the conduct was scoped to the UK. It is because enforcement capacity is what makes jurisdiction real, and most regulators do not have it.

Who Decides Which Regulator Wins When Claims Conflict?

In iGaming, the operator decides — through where it chooses to be licensed, which markets it serves, and which permits it surrenders when the costs rise. Flutter's 2024 disclosure puts regulated-markets share of global iGaming at 52%, with gray-market exposure at the group level around 5%. Entain's exposure is higher: 88% of revenue from regulated markets per the 2024 annual report, implying 12% from territories where the operator has chosen to operate without a local permit.

When two regulators both claim an operator, the operator's choice is which permit to keep and which market to exit. The "winner" is the regulator the company values more — usually the one with the larger paying customer base.

What Does the Greek HGC Register Tell Us About Jurisdictional Sovereignty?

Greece took the assertive route. Under Law 4002/2011 as amended in 2019, the Hellenic Gaming Commission issued 24 online licenses as of 2024, and non-HGC-licensed operators serving Greek residents are subject to DNS blocking. OPAP, Stoiximan, Novibet, Winmasters, and Bet365's Greek-market entity all hold separate HGC permits despite their parents holding MGA and UKGC licenses for other territories. The HGC does not accept those as equivalents.

This is the opposite end of the spectrum from "single regulator with global reach." It is national sovereignty exercised at the IP-routing layer. The HGC does not need to defeat the MGA's claim — it just blocks the traffic.

Why Do Listed Operators Disclose Regulatory Risk Differently Than Private Ones?

Listed operators must. Flutter, Entain, and DraftKings file disclosures the SEC and LSE require, with revenue segmentation by regulated vs unregulated market, named risk factors, and quantified contingent liabilities. Bet365 is private — owned by the Coates family per Companies House filing history — and discloses only what UK private-company filing rules force. Denise Coates's £221m 2024 compensation is on the public record because UK private-company directors disclose it. Bet365's gray-market revenue split is not, because no rule requires it.

The gap matters: when a regulator's jurisdictional claim is being debated publicly, the listed operators' filings are where the financial exposure is quantified. The private ones are silent until the enforcement notice lands.

What Does This Mean for the CFTC Prediction Markets Probe?

It means the editorial worth writing is not "who is right." It is "what is the enforcement capacity behind each claim, and what is the operator's revenue at stake under each regime." Those are the questions a forensic analyst would ask of any jurisdictional fight, and they are the questions we would ask of the CFTC's mandate read against state gambling regulators if we had the grounded data to do it.

We do not. The grounding for this piece runs through UKGC, MGA, HGC, NJDGE, and AGCO filings. The CFTC enforcement register, the relevant Congressional Research Service memos, and the Kalshi and PredictIt litigation records sit outside our desk's evidence stack today. We flag the limit because the limit is the point: an investigative piece earns its credibility from what it refuses to claim without the document in hand.

This piece does not cover the substance of the CFTC's specific jurisdictional theory over event contracts. It does not cover state-level prediction market litigation. And it does not cover the Commodity Exchange Act's treatment of binary options. Each of those is a separate argument, and each requires its own evidence file.

FAQ

Why frame a CFTC prediction-markets story through iGaming case files?

Because the iGaming public record is the densest available body of evidence on how jurisdictional overlap actually resolves in regulated gambling-adjacent markets. The UKGC, MGA, and HGC have published fines, settlements, and license registers covering the same operators across overlapping mandates. Reading those records gives an analyst a working model of what enforcement looks like when two regulators claim the same conduct — without inventing claims about a CFTC fight we cannot ground in primary documents.

What is the largest published UKGC fine relevant to jurisdictional overlap analysis?

The £17m regulatory settlement against Ladbrokes and Coral, both Entain brands, announced by the UKGC on August 17, 2022. The notice cited social responsibility and anti-money laundering failings, including inadequate customer interactions with high-risk players. No other regulator that licenses the same parent group issued a parallel sanction tied to the same conduct, which is the pattern the piece above tracks.

Does GAMSTOP affect operators licensed outside the UK?

No. GAMSTOP covers every UKGC-licensed online operator automatically and blocks deposits across all of them for the user-selected exclusion period. It has no enforcement reach against operators licensed only by the MGA, the HGC, or Curacao. A user who self-excludes via GAMSTOP can still deposit at a non-UK-licensed operator unless that operator chooses to integrate voluntarily. As of December 2024, GAMSTOP reported approximately 420,000 registered users.

What does "regulated markets revenue" mean on an operator's annual report?

It means revenue earned in jurisdictions where the operator holds a local license that the regulator there recognises as valid. Entain disclosed 88% of 2024 revenue from regulated markets; Flutter's group-level figure was higher when adjusted for FanDuel's pure US footprint. The remainder — the "unregulated" or "gray market" share — is revenue from territories where the operator runs without a local permit, often relying on a Curacao or other sublicense that the local regulator does not accept.

How does the HGC enforce against operators it does not license?

DNS blocking. Under Law 4002/2011 as amended in 2019, non-HGC-licensed operators serving Greek residents have their domains blocked at the ISP level. The HGC does not need to win a jurisdictional argument with the MGA or the UKGC to do this. It simply removes the operator's reach to Greek customers at the network layer. As of 2024 the HGC had issued 24 online licenses to operators willing to comply with Greek rules — including HGC-specific tax, KYC, and responsible-gambling requirements — rather than route around the block.

How long after a regulator publishes an enforcement notice does the financial impact land on the balance sheet?

For listed operators it lands in the next quarterly filing. The Sky Betting £1.17m UKGC fine of March 2023 flowed through Flutter's reporting cycle within weeks. The Entain £585m DPA of December 2023 was provisioned in the same financial year. Private operators like Bet365 typically reveal the impact only in the annual Companies House filing — the £582,120 December 2022 fine appears in the year-end disclosure rather than as a market-moving event.

What is the operative test for whether a regulator's jurisdictional claim has real teeth?

Three things, in order: published enforcement actions with named operators and quantified penalties; the operator's response on the public record — paid, contested, or settled; and the operator's continued or terminated licensing relationship after the action. A regulator that issues position papers but never names an operator is asserting jurisdiction without exercising it. The UKGC, MGA, NJDGE, and AGCO all clear the test. Most national regulators do not.