Why proving due diligence is now critical for betting shops, AGCs and bookmakers

Why Age Estimation Is a Bigger Compliance Risk Than You Think 

Across betting shops, Adult Gaming Centres (AGCs), bookmakers and remote gambling platforms, the pressure to prove compliance in the real world is becoming even more poignant.

At Serve Legal, we are seeing more operators approach us for independent compliance audits because the regulatory conversation has changed. It is not enough to have policies, training records and internal procedures alone as the Gambling Commission increasingly expects operators to demonstrate that those controls are working consistently in live customer journeys, on gaming floors, at betting counters and across remote customer interactions.

For operators working across large estates, the challenge is being able to deliver consistent proof, at scale, with reporting robust enough to support operational teams, compliance leaders and boards alike. This is exactly why many of the biggest names in UK and Ireland betting and gaming have trusted Serve Legal in this space for more than a decade. Due diligence is no longer simply a defensive exercise used after something has gone wrong. In 2026, it is one of the clearest ways to evidence that your business is taking reasonable, responsible and proactive steps to protect customers, support colleagues and safeguard your licence to operate.

Proving Customer Interactions Work 

A major reason for this shift is the Commission’s continued focus on customer interaction requirements for remote operators under SR Code 3.4.3. The requirement is clear that operators must be able to identify, act and evaluate risk throughout the customer lifecycle. This starts from the point an account is opened and includes monitoring spend, patterns of play, time spent gambling, customer-led contact and wider behavioural indicators.

What makes this so significant is that the expectation does not stop at intervention. Operators must also understand whether the action they took actually changed customer behaviour and reduced the continued risk of harm. In practical terms, the Commission is looking for evidence that controls work, not just evidence that controls exist. For operators managing both digital and physical journeys, this is where high-quality compliance data becomes essential. At Serve Legal, our advanced reporting and insight capabilities help clients move beyond isolated outcomes and instead identify recurring risk patterns, regional inconsistencies and operational drift before they become wider regulatory issues.

Age Verification Compliance

This same pressure is being felt strongly across physical premises. From 30 August 2024, all gambling operators with physical premises, including smaller AGC and betting operators, have been required to carry out age verification test purchasing. At the same time, the Commission updated its good practice code from a “Think 21” approach to “Think 25”, raising the expected standard for frontline challenge processes. For betting shops and AGCs, this creates a very practical challenge. Senior teams may be confident in their central policy, but the true regulatory risk sits in day-to-day execution on the shop floor. Our nationwide audit coverage, international capabilities and dedicated account management support allow operators to test standards consistently across diverse estates, while still retaining the local visibility needed to coach individual venues and teams.

Due Diligence as a Governance and Assurance tool 

The importance of proving due diligence also extends beyond age checks and safer gambling interactions. It supports the wider governance story around board oversight, operational assurance and continuous improvement. If the Commission ever reviews a business, the ability to demonstrate regular independent testing, clear remediation plans and evidence of follow-up action can make a meaningful difference in showing that the operator has taken its obligations seriously.

This is why leading operators increasingly want more than a pass/fail compliance provider. They need a partner capable of transforming frontline observations into high-level reports, actionable trends and regulator-ready evidence that can support senior decision-making. That is why more operators are moving toward regular compliance audits, mystery shopping and customer journey testing as part of their normal assurance framework rather than waiting for a problem to force action.

For AGCs and bookmakers, this is increasingly about protecting consistency across estates. A strong head office framework means very little if the customer experience varies significantly from one location to another.

That is where independent auditing has become so valuable and where an experienced compliance partner can make the difference between simply meeting the requirement and being able to prove, with confidence, that your controls are working exactly as intended. Speak to the industry leaders today, and enquire about Serve Legal’s Age Verification and Responsible Gambling Compliance Audits.