The Compliance Race: Why Africa’s iGaming Boom Is Testing Limits of Regulation, Technology

Africa’s iGaming boom is creating a new race—not just for players, markets and revenue, but for the technology and regulatory capacity to keep pace with explosive growth. As operators expand across borders and millions of users flood digital platforms, the industry faces a growing question: how do you grow at speed without letting compliance become either a bottleneck or a blind spot? Richard Emah, Regional Director, North/West Africa at Sumsub, a global verification and compliance technology company, believes the answer lies in smarter identity verification, continuous monitoring and closer collaboration between operators and regulators. Nseobong Okon-Ekong writes, following an interview with Emah in Lagos

There is a paradox at the heart of Africa’s booming iGaming industry. The same technology that allows an operator to acquire millions of customers in days can also expose the operator to an entirely different problem: how do you know who those customers are, where they are coming from, what documents they hold, how their transactions should be monitored and whether the compliance rules governing them are being properly applied?

In an industry where speed is currency, compliance can easily become the bottleneck. A customer clicks. An account is created. Money moves. Bets are placed. Withdrawals are requested. Behind those apparently simple actions, however, lies a complicated global architecture of identity verification, Know Your Customer (KYC), anti-money laundering controls, transaction monitoring, business verification, proof of address and regulatory reporting.

Africa is making that equation even more complicated. Operators are increasingly crossing borders. Customers are increasingly mobile. Regulations differ from country to country. Identity documents vary dramatically. Regulators are also demanding greater accountability from businesses operating in markets where digital gaming is growing faster than many existing compliance infrastructures were designed to handle.

This is the environment in which Sumsub, a global compliance technology company with more than a decade of experience, over 4,000 clients, operations spanning more than 200 countries and territories, and more than 1,000 employees, is positioning itself. Its message to the African gaming industry is blunt: scaling without scalable compliance is a recipe for trouble.

“We have built an advanced and complete compliance and monitoring solution for different verticals and, of course, including iGaming,” Richard Emah, Regional Director, North/West Africa of the company, told GAMINGWEEK.

Sumsub has been operating in Africa for years but has significantly intensified its engagement with the continent in the past three years through industry events and increased brand visibility. But the company’s real proposition goes considerably deeper than sponsorships, exhibitions and conference appearances. It is selling infrastructure for an industry that is rapidly becoming borderless.

When growth exposes the cracks

For African operators, expansion is no longer necessarily a domestic affair. A successful operator in Nigeria may want customers in Ghana, South Africa, Kenya, Zimbabwe or elsewhere. But every new jurisdiction potentially introduces a different regulatory framework and a different identity-verification problem. That is where many operators discover that the compliance infrastructure that worked perfectly well at home does not necessarily travel with them.

According to Emah, this is one of the most common conversations it has with Nigerian businesses.

“I think when Nigerian businesses come and speak to us, they always ask for one thing: ‘We are scaling. The current vendor is not helping and cannot facilitate our expansion to other markets. Can you help?’” Emah.

That sentence captures one of the biggest infrastructure challenges facing Africa’s digital economy. The problem is no longer simply acquiring users. It is verifying them at scale across multiple jurisdictions without introducing intolerable friction.

The company’s proposition is an all-in-one verification platform that covers the customer journey from onboarding through ongoing monitoring.

“We are talking about an all-in-one verification platform that covers the entire user life cycle—from onboarding to ongoing monitoring, to transaction monitoring, to business verifications, to proof of address,” Emah said.

For Nigeria, the platform supports non-document verification using identifiers such as BVN and NIN.

That becomes particularly significant in a market where operators are expected to verify customers while simultaneously competing for a generation of increasingly impatient digital consumers.

14,000 documents—and the African verification problem

One of the company’s strongest claims is the scale of its document database.

“We have an extensive database of different documents—over 14,000 different document types,” stated Emah.

It is a seemingly technical figure, but it goes to the heart of the African compliance challenge.*

A verification system built around a narrow selection of identity documents may function effectively in one country. Its limitations become apparent when an operator suddenly needs to verify customers from dozens of jurisdictions.

The African gaming market is increasingly forcing operators to confront that reality. The question is no longer simply: Can you verify a Nigerian customer?

It is: Can you verify a Nigerian, Zimbabwean, Kenyan, South African or other customer just as efficiently—and can you do it without building a separate compliance architecture for each market?

Sumsub says its platform can onboard users from more than 200 countries. That scalability, it argues, is becoming a competitive advantage. And nowhere is that more apparent than in the experience of one of the continent’s biggest gaming operators.

The Zimbabwe problem that became a business problem

The operator’s name was withheld, but the story is revealing. The company was already operating across several African markets and had a significant customer base. Yet it encountered a fundamental problem: its existing verification provider could not adequately process Zimbabwean identity documents.

The consequence was not merely technical. Customers could not be seamlessly verified. When a legitimate customer cannot get through the verification process, the operator potentially loses the customer. The solution was the company’s document-processing technology, known as ‘All Doc’.

“All Doc is pretty much a solution that extracts data from any document, and that really helps them to process Zimbabwean players seamlessly,” stated the firm.

The results, according to the company, were dramatic, noting that “we’re talking about over 240 per cent return on investment”.

The figure, Emah said, was independently verified by Forrester. The company also reported a 95 per cent increase in conversion compared with the earlier 40 per cent rate in the cited case.

The implications are difficult for operators to ignore. Compliance, traditionally regarded as a cost centre, can become a revenue-enabling function when it removes unnecessary barriers between legitimate customers and the platform.

That is perhaps the most important shift taking place in the compliance conversation. The question is no longer whether compliance costs money. The question is how much money poor compliance costs the operator.

Two million users, one week, 4.5 seconds

Then came the ultimate stress test. An unnamed client launched an extensive marketing campaign. The response was overwhelming, with over two million users coming in within a week.

For most compliance departments, that would represent a crisis waiting to happen. Millions of customers arriving simultaneously means millions of identity checks, risk assessments and onboarding decisions. But Emah said Sumsub onboarded more than two million users, with a turnaround time of 4.5 seconds per user.

“That is a milestone that we are so much proud of. That shows you how robust the system in Africa was,” Emah added.

For an African gaming industry obsessed with acquisition, the figure offers a sobering lesson. Marketing can bring the customers. But compliance technology determines whether the operator can responsibly absorb them.

The ability to handle extraordinary spikes in customer volumes may therefore become as important as the ability to generate those volumes in the first place.

The machine is not enough

There is another dimension to the company’s proposition that is easy to overlook. The technology may be automated, but the regulatory intelligence behind it is human.

The company has more than 50 specialised compliance officers who engage with regulators across jurisdictions.

“We have over 50 highly specialised compliance officers in-house who are actively in discussions with different regulators globally,” Emah stated.

That interaction is critical because there is no single African regulatory template. Each jurisdiction has its own rules, thresholds, licensing arrangements, identity requirements and interpretation of compliance obligations.

He said, “We know exactly what the specific markets need. We know exactly what the requirements are. We know exactly what kind of verification or use cases are applicable to certain countries.”

This is where the technology-versus-regulation debate becomes more nuanced. Technology can automate verification. It cannot, by itself, resolve regulatory ambiguity. That brings the conversation to the issue that may ultimately determine how efficiently Africa’s iGaming markets develop: the relationship between operators and regulators.

The regulator is not the enemy

Perhaps the strongest argument is that regulators should not be viewed as obstacles to innovation—quite the opposite. Emah described regulators as the defining force behind the compliance ecosystem, saying, “We are in this space because of the regulations. That’s a defining factor there. Regulators are the key players here.”

But he believes the traditional top-down model needs to evolve. Regulators design the rules. Operators implement them. Yet the people implementing the rules are often the first to discover where they produce unintended consequences.

His analogy is striking.

“Regulators are like military commanders, so they send out soldiers. Soldiers are the operators,” stated Emah. “So operators go to the field. They get feedback. They come back. They should be able to discuss those feedback.”

It is an unusually candid description of the regulatory relationship.

The operator is not suggesting that businesses should write the rules. Rather, operators should be part of the feedback mechanism that allows regulators to understand whether the rules are achieving their intended objectives.

“Hey, these rules — this law, this one doesn’t work. We should optimise it because this is what is affecting players,” he added.

That distinction is crucial. Regulatory engagement is not lobbying for weaker rules. It is about making rules workable, enforceable and relevant to actual market behaviour.

Markets move faster than legislation

Technology changes. Payment systems evolve. Customers change their behaviour. New forms of digital identity emerge. Operators enter new markets. Yet regulation can remain static. The company’s representative believes this must change.

“The law should be in a dynamic mode, meaning optimise once there is concrete evidence that it is not serving the core purpose of why it was even created in the first place,” said Emah.

That may be one of the most important propositions for African gaming regulators.

A strong regulatory framework does not necessarily mean an inflexible one. It means a framework capable of responding to evidence without compromising its core objectives.

Africa is not alone

The temptation is to regard regulatory fragmentation as a uniquely African problem.

It is not. The interviewee points to the global implementation of travel-rule obligations as evidence. The original ambition was to establish a unified framework. Instead, different jurisdictions have adopted different requirements and thresholds.

Emah said, “It was supposed to be a single framework. But now every country has its own requirement so far as travel rule is concerned.”

For a global operator, the consequences are obvious.

“One is asking for this, the other one is asking for that and so on and so forth,” Emah noted.

The operator is consequently left trying to reconcile competing obligations. That is precisely the kind of regulatory fragmentation that can undermine the efficiency regulators themselves are seeking to create.

The next frontier: Regulation that listens

The African gaming industry is unlikely to slow down. More smartphones will enter the market. More operators will expand across borders. More customers will move between platforms. More payments will become digital. The compliance challenge will grow with the industry. But the answer may not lie in simply adding more rules. It may lie in making regulators and operators better at talking to each other.

Emah’s prescription is simple, saying, “Regulators are the commanding force; operators, on the other hand, are the executors. So there should be communication and real-time feedback. The feedback should flow both ways. Operators should be able to explain what is happening on the ground. Regulators should be able to test whether proposed changes remain legally and practically sound. This is what is happening. This is how it’s affecting. We think it will be better to change it this way.”

Then regulators assess the implications, stated Emah, saying, “Is it safe? Is it fine? Okay, it is fine. Let’s implement it.”

That, ultimately, is the compliance ecosystem the company is advocating. Not regulation versus technology. Not regulators versus operators, but regulation, technology and industry expertise working together.

The final objective is perhaps best captured in Emah’s closing argument.

He said, “There should be crystal-clear rules and regulations that are aligned with practical activities in the field.”

For Africa’s iGaming industry, that alignment could become the difference between growth that is merely explosive and growth that is sustainable. In the next phase of Africa’s gaming revolution, the winners may not simply be the operators who acquire the most players. They may be the ones capable of proving, quickly and consistently, that they know exactly who those players are—and of doing so while remaining compliant in every market they enter.