Last updated: 11 October 2026
You can pick the best platform, sign the right game studios and get your licence approved, and still lose a launch because the servers sit in the wrong place. In iGaming, hosting is not just an IT purchase. Where your gaming system runs, who controls the hardware and how fast you can fail over are often licence conditions, and getting them wrong means a re-architecture before go-live.
The short answer: iGaming hosting is the server, network and security infrastructure your casino or sportsbook platform runs on, and it differs from ordinary web hosting in three ways: the host must accept gambling workloads, the location of your core gaming systems is often fixed by your licence, and the setup must meet regulator rules on uptime, disaster recovery and audit access. For a small offshore launch that means anywhere from a few hundred to a couple of thousand dollars a month; in regulated US states it means in-state hardware for every state you enter.
This guide covers what regulators actually require by jurisdiction, the hosting models and the kinds of providers that sell them, what it costs with published prices, and the red flags to check before you sign. It’s written for operators planning a launch or a new market, and it’s useful for platform suppliers and affiliates who need to understand the operator’s constraints.
What is iGaming hosting?
iGaming hosting covers everything underneath your platform software: the servers (bare metal, virtual or cloud), the data centre space they sit in, the network that carries player traffic, payment calls, odds feeds and live dealer streams, and the security layer in front of it all (DDoS protection, web application firewall, CDN).
Three things make it a separate buying decision from standard hosting:
- Acceptable use. Many mainstream hosts restrict or ban gambling sites in their terms of service, even licensed ones. Check the acceptable use policy before you build anything on a host.
- Location as a licence condition. Several regulators specify where the gaming system, random number generator, player database and financial data may sit, and some require hardware inside a state or a specific city.
- Audit and resilience rules. Regulators expect a disaster recovery site, off-site backups, documented access for inspectors and certified security controls. These shape the architecture, not just the price.
Not every part of your stack is under the same rules. The marketing site, CDN-cached lobby assets and affiliate landing pages can usually run anywhere. The “critical components” (gaming server, RNG, wallet and player account data) are what regulators care about.
iGaming hosting requirements by jurisdiction
This is where most hosting guides stay vague. Here is what the rules say in the markets operators ask about most, checked against the regulators’ own texts in October 2026.
| Jurisdiction | Where core gaming systems may sit | What it means for hosting |
|---|---|---|
| New Jersey | Primary internet gaming equipment in a restricted area of the casino hotel or another secure, approved facility within Atlantic City | City-level colocation; backup used only to restore data can be elsewhere in New Jersey |
| Pennsylvania | Board-approved location; primary server in a secure data centre, which may be anywhere in the US; redundant, secondary and emergency servers must be in Pennsylvania at a separate premises | Split architecture with an in-state DR site; the Board can require revenue and complaint data to be kept in Pennsylvania |
| Other US states | Set state by state; the federal UIGEA intrastate exemption relies on bets being initiated and received in one state | Plan on in-state hardware per state and confirm each regulator’s rules before you sign a data centre contract |
| Great Britain (UKGC) | No location requirement for operators serving British customers; you need a licence because you serve GB players, wherever the equipment sits | Free choice of location; putting live or DR equipment in Britain can itself trigger licensing for a non-GB-facing operator |
| Malta (MGA) | Malta, any EEA state, or a third country where the MGA is satisfied the same principles apply; full addresses of every hosting site (including cloud regions) must be declared | EU/EEA cloud and colocation are workable; critical components on cloud need a documented risk assessment, and replication servers must be open to MGA inspection |
| Ontario (AGCO) | The Registrar’s Standards set no server-location rule; they require a disaster recovery site (Standard 5.07) and off-site backups (Standard 5.25) | Many operators still host in Canada; confirm with iGaming Ontario and your platform before choosing a region |
| Curaçao (CGA) | Not clearly set out in the published LOK material we reviewed; some hosting vendors state that core systems must be hosted on the island | Treat local hosting as a question for the CGA or your licensing adviser, not a vendor’s sales page |
Sources: New Jersey N.J.A.C. 13:69O-1.2(n); Pennsylvania 58 Pa. Code § 809a.3; the UK Gambling Commission’s remote gambling equipment guidance; the MGA’s technical infrastructure guidelines as summarised by GVZH Advocates; and the AGCO Registrar’s Standards for Internet Gaming.
Two corrections to claims you’ll see on pages ranking for this topic. First, the idea that “in many regulated jurisdictions the hosting provider must hold a gambling licence” is not how the rules above work: the operator is licensed and the location of its equipment is a licence condition, while the host is a supplier you are responsible for. Second, vendor pages that say Ontario or Malta “require” in-country hosting overstate it. Malta allows any EEA location, and the AGCO’s standards contain no location rule. If you’re licensing in either market, our MGA licence guide and Ontario iGaming licence guide cover the rest of the application.
The technical requirements every regulator shares
Beyond location, the expectations are similar across markets:
- Disaster recovery and backups. A DR site that can take over, off-site backups and an architecture that limits loss of session data (the AGCO writes all three into its standards).
- Information security management. The MGA refers to ISO/IEC 27001 and 27002 and seeks PCI DSS Level 1 where card data is involved. Most specialist hosts advertise ISO 27001 data centres for this reason.
- Inspector access. Documented procedures giving the regulator access to hardware, logs and replication servers, plus a declared list of addresses, rack numbers and IPs.
- Certified, approved systems. Your gaming system and remote game servers are approved or certified by a testing lab, so moving them to a new environment can trigger a change notification or re-test.
What does iGaming hosting need to deliver technically?
The regulator sets the floor. Your players and your P&L set the rest:
- Low latency for in-play betting and live dealer streams. Host near your players and your main odds and streaming partners.
- Capacity for spikes. Traffic on a big match day or a jackpot drop can be many times your average. Load balancers, auto-scaling or spare dedicated capacity handle this.
- DDoS protection. Gambling sites are frequent targets, often timed to big events. You need always-on mitigation, not something you switch on after an attack starts.
- Uptime. 99.9% is the figure most vendors quote. That still allows roughly 8.8 hours of downtime a year, so ask how the SLA is measured, what is excluded and what the credit is.
- Private connectivity. Larger operators use private networks to connect platform, payment gateways, odds feeds and studios instead of internet VPNs.
- Support that understands gaming. 24/7 human support with a known response time, not a chatbot, when a payment integration fails on a Saturday night.
iGaming hosting models compared
| Model | What you get | Best for | Watch out for |
|---|---|---|---|
| Included in a white label or turnkey platform | The platform provider hosts and runs the stack | New brands that want speed over control | Hosting costs are buried in the revenue share; you can’t move regions on your own |
| Shared hosting | A slice of a server shared with other customers | Affiliate and content sites only | Not suitable for a gaming platform; many shared hosts ban gambling content |
| VPS | Virtual server with reserved resources | Small offshore operations, staging, back-office tools | Noisy neighbours and limited performance under load |
| Dedicated or bare metal | Physical servers reserved for you in a provider’s data centre | Operators who need predictable performance and declared hardware locations | You plan capacity ahead; scaling means ordering hardware |
| Colocation | Your own hardware in a third-party data centre | Regulated US states and operators with in-house infrastructure teams | Capital cost, hardware lifecycle and on-site hands |
| Public cloud or hybrid | Hyperscaler services (AWS, Azure, Google Cloud), often with dedicated hardware for the core | Scaling front ends, analytics and non-critical services | Region choice must match licence rules; regulators may ask for a cloud risk assessment |
Most established operators end up hybrid: critical gaming components on dedicated or colocated hardware where the licence requires it, with cloud for front ends, data and burst capacity, all behind a CDN and DDoS layer. If you’re still choosing between white label, turnkey and building your own, read online casino software explained first, because that decision usually settles who owns hosting.
Who provides iGaming hosting?
Providers fall into four groups. The examples below are named for orientation, not ranked or endorsed, and the facts come from each company’s own website in October 2026.
Specialist iGaming infrastructure providers
Built around regulated gambling, with in-state US footprints and private networks.
- Continent 8 Technologies lists more than 100 connected locations, including 30 US states plus Washington DC and three Canadian locations, and sells colocation, private and public cloud, a private “Gaming Exchange” network, DDoS protection and managed security. It names FanDuel, BetMGM, Playtech and Light & Wonder among customers. No public pricing.
- Internet Vikings says it offers licensed in-state hosting in 24 US states, more than 30 data centres including Ontario and Malta, a Malta replication server, ISO 27001 certification and Cloudflare-based DDoS protection. No public pricing.
Hosting companies with iGaming packages
General hosting firms with gaming-ready locations and compliance marketing.
- Servers.com (by Nexcess) sells dedicated iGaming servers across 12 data centre locations in North America, Europe, South America and Asia Pacific, and cites MGA compliance support and an average ticket response under 15 minutes. No public pricing.
- NetShop ISP (Cyprus) lists data centres in Cyprus, Malta, the UK, the Netherlands, Singapore and Hong Kong, with PCI DSS and ISO 27001 compliant colocation. Quote-based, with a price-match offer.
- HostingB2B publishes Malta and Curaçao VPS plans aimed at MGA and Curaçao licensees, plus dedicated servers and colocation.
Hyperscale cloud
AWS, Microsoft Azure and Google Cloud sell transparent, metered pricing and global regions. They suit front ends and data workloads, and some specialists (Continent 8 among them) manage AWS environments for operators who need cloud inside regulated footprints.
Your platform provider
On a white label or turnkey deal, the platform provider usually chooses and pays for hosting. That’s the simplest route, and also the one where you have the least say over location and failover. Our breakdown of white label casino costs shows where hosting usually hides in those contracts.
To compare more providers side by side, browse the hosting and infrastructure directory.
How much does iGaming hosting cost?
The honest answer is that the specialist end of the market doesn’t publish prices. None of the specialist providers above lists a price for dedicated or in-state hosting; you get a quote. What is published gives you useful anchors:
| Item | Published price | Source and context |
|---|---|---|
| Casino VPS hosting | $150/month | GBO International price table, May 2026 |
| Cloud-based casino hosting | $350/month | GBO International |
| Dedicated server hosting | $500/month | GBO International |
| Managed casino hosting | $700/month | GBO International |
| Malta VPS for MGA licensees | €540 to €1,650 per billing period | HostingB2B, 2 to 8 vCPU; the page abbreviates the period as “/qu”, so confirm whether it is monthly or quarterly |
| Curaçao VPS | €1,140 to €1,650 per billing period | HostingB2B, same caveat |
| Cloud server (AWS m7i.xlarge, 4 vCPU, 16 GiB) | $0.2016/hour, about $147/month on demand | US East, October 2026; roughly 27% to 34% less on a one-year commitment |
| CDN, WAF and DDoS (Cloudflare Business) | $200/month billed annually, $250 monthly | Cloudflare plans page; Enterprise is quote-only |
| In-state US hosting, private networks | Not published | Continent 8, Internet Vikings and others quote per project |
Worked example: a lean offshore launch
Assumptions: one casino brand on a self-hosted turnkey platform, a hub licence such as Curaçao or Malta, a primary dedicated server and a standby for disaster recovery, a cloud server for the front end, and an annual-billed security plan. Prices from the table above.
| Line | Monthly |
|---|---|
| Primary dedicated server | $500 |
| DR standby dedicated server | $500 |
| Front-end cloud hosting | $350 |
| CDN, WAF and DDoS layer | $200 |
| Total | $1,550 a month, about $18,600 a year |
That figure leaves out managed services, monitoring, a database cluster, staff time and any certification work after a move, so treat it as a floor, not a budget. Two decision rules follow from it:
- Hosting is rarely your biggest line in a hub-licence launch. Even doubled, it’s smaller than a year of Curaçao licence fees (€47,450, see our Curaçao licence guide). Don’t cut DR or DDoS protection to save a few hundred dollars a month.
- In the US, cost scales with the number of states, not traffic. Each new state means new in-state hardware, network links and audits. Get per-state quotes before you commit to a multi-state roadmap.
How to choose an iGaming hosting provider
- Start from your licence map. List every jurisdiction you’ll hold a licence in and write down its location, DR and audit rules. That list rules providers in or out before price comes up.
- Confirm acceptable use in writing. Get the provider to confirm that licensed gambling workloads are allowed under its terms.
- Check data centre locations against your rules. Ask for street addresses, not just city names. You’ll need them for your regulator filing anyway.
- Ask for certificates, not logos. ISO 27001 certificates with scope, PCI DSS attestation if card data passes through, and SOC 2 reports where offered.
- Test DDoS protection and failover. Ask what capacity is mitigated, whether it’s always on, and how long a failover to the DR site takes in practice.
- Read the SLA. The uptime figure, how it’s measured, exclusions, and service credits.
- Check your platform’s compatibility. Your platform and game suppliers may only support certain environments, and moving hosts can require re-certification.
- Price the exit. Contract term, data export, and what happens to your hardware or IP addresses if you leave.
Red flags
- A host whose standard terms ban gambling, even if a salesperson says “it’s fine”.
- “Licensed hosting” with no licence named. Ask which regulator and what the licence or approval covers.
- Compliance claims (“MGA compliant”, “Curaçao ready”) with no explanation of which requirement is met and how.
- No DR site, or backups held in the same building as production.
- An uptime promise with no SLA document behind it.
- “Bulletproof” or “offshore, no questions asked” hosting. It’s built to ignore takedown and legal requests, which is the opposite of what a licensed operator needs to show a regulator or a payment partner.
Your next step
Before you ask anyone for a quote, write one page: the jurisdictions you’ll be licensed in, the location and DR rule for each, your expected peak traffic, and whether your platform provider hosts for you. Send that same page to two or three providers so the quotes compare like for like, and have your licensing adviser check the location rules before you sign. You can shortlist candidates in the hosting and infrastructure directory.
This guide is independent information, not legal advice. Hosting rules are taken from regulator texts and provider websites as of the date above; confirm the current requirements with your regulator or a licensing adviser before you choose a host.
