AdTech and Targeting Restrictions in Gambling Marketing

Note: This guide is for information only, not legal advice. Gambling ads are for adults. Follow local law. Add age gates. Add clear “Play Responsibly” labels.

A cold start: can you still target in 2026?

The ad stack changed fast. Third‑party cookies go away. Mobile IDs saw limits. Walled gardens got strict. For gambling, this hit hard. Can you still target by interest? Yes, in some places, with care, and only with strong proof of age and geo. In other places, no. The gap between allowed and banned sits in small words: license, consent, age, and place. If you plan with those in mind, you can ship safe, working campaigns. If not, you burn spend and risk bans.

This page keeps things plain. I use simple words. I point to the source rules when I can. I show what teams on the ground do now. Please read the links. Rules change. Platforms update often.

Who is this for, really?

This is for people who run iGaming or sports betting ads and must keep them clean: performance leads, affiliate owners, in‑house legal, and heads of compliance. If you must balance scale, cost, and rules, this is for you. If you run brand only with no direct calls to bet, you will still find key steps here.

Field notes from the trenches

One team in the UK moved spend to search and private deals. They used strict age gates, clear “18+” badges, and a CMP that logged consent. They also set programmatic to PMPs only. Their CPA did not drop. Fraud flags did. Why? The data path was clean. Fewer blocks. Fewer policy hits.

Another group tried open exchange with broad interest lists in the EU. They used a CMP, but it did not pass the latest TCF string. A big DSP cut the line mid‑flight. Spend fell to near zero in a day. Lesson: consent needs a standard format and a log you can show. Today, that often means IAB Europe’s TCF 2.2. You can read it here: IAB Europe’s TCF 2.2.

A U.S. sportsbook tested social with a tight allowlist and state‑only geos. They sent docs to the platform and got pre‑approval for real‑money ads. They used clear state pages and 21+ age gates. Results were stable. Appeals were rare. Slow, yes. But safe.

What changed in adtech that hit gambling hardest

First, the web: Chrome moves to the Privacy Sandbox and limits third‑party cookies. Topics API and other tools try to keep ads useful with more privacy. Read more here: Privacy Sandbox and Topics API. This shifts value to first‑party data, clean consent, and context.

Second, apps: Apple needs user opt‑in for cross‑app tracking. It is called ATT. See the doc here: AppTrackingTransparency (ATT). Opt‑in rates are low in many apps, so you need other ways to measure and target.

Third, consent: regulators want clear choice, no dark patterns, and real logs. The UK ICO gives guidance on cookies and consent. It is plain and helpful: ICO guidance on cookies. Many vendors now support TCF 2.2, and platforms check the string at bid time.

Quick reality check: where you can target today

Below is a snapshot. It can change by country, by account, and by how you set your stack. Use this to ask the right questions with your reps and your legal team. Always check live policies before you book media.

Google Search	UK	Restricted / Allowed	Contextual keywords; limited audience lists; age+geo filters	Licensed operator; age gating; responsible copy	Often yes	Google Ads gambling policy
DV360 (Programmatic)	EU	Heavily restricted	Contextual; PMPs/PG with vetted pubs; no broad interest without consent	TCF 2.2 CMP; tight GEO fences; brand safety	Inventory‑level	The Trade Desk ad policies
Meta Ads	US (legal states)	Restricted / Allowed	Allowlists; age+geo; strict creative; limited interests	Proof of license; 21+ in many states	Platform pre‑approval	Meta gambling ads policy
X Ads	CA	Restricted / Allowed	Age/gender; allowlisted categories; geo	License proof; safe copy	Yes	X Ads policies
TikTok Ads	EU	Mostly Prohibited / Pilot only	Contextual pilots; very tight rules	Strong age gating; strict creative review	Case by case	TikTok ad policies
Snapchat Ads	US	Restricted / Allowed	21+; geo; limited interests; clear disclaimers	Responsible gambling copy; proof of law	Yes	Snapchat ad policies
App Stores (Distribution)	Global	Store rules apply	N/A (distribution, not ads)	ATT (iOS); store review; local law	N/A	App Store rules; Google Play RMG policy

Deep dive by channel: what’s allowed, what’s risky, what’s wise

Search

Search works when you keep it contextual and age‑safe. In most regions, you can bid on intent terms and run callouts for legal, licensed play. Check this first: Google Ads gambling policy. Use location groups to fence legal areas only. Avoid look‑alike or similar audience hacks if they cross consent lines. Make sure your site has clear age checks and “Play Responsibly” links.

Programmatic (open exchange vs PMPs/PG)

Open exchange is high risk today for gambling. Even with consent, many SSPs block or label the bid. Safer path: curated PMPs and programmatic guaranteed with vetted publishers. Use deals where the site has adult content controls and can enforce age‑screen. Read a major DSP rule set here: The Trade Desk advertising policies. Demand a seat at the policy review call before launch. Confirm that your CMP passes a valid TCF 2.2 string on every page view.

Social (Meta)

Meta allows real‑money gambling ads in select regions with strict checks. You need platform approval, a license, tight geo, and age gates. You can test allowlists of pages or interests that Meta permits. The rule set changes, so bookmark this: Meta gambling ad policy. Keep creative plain and compliant. No minors. No claims that suggest certainty or pressure.

Social (X)

X (Twitter) supports gambling ads with age and geo controls in some markets. You must show proof and accept a review. See base rules: X Ads policies. Use keyword lists and tight follower look‑ins from allowlisted accounts only. Watch reply threads; brand safety can shift fast.

Social (TikTok)

TikTok is the most strict. Most real‑money ads are not allowed. Some pilots run in narrow cases. If you try, know that you will need very strong age gates and strict creative limits. Keep an eye on this page: TikTok advertising policies.

Social (Snapchat)

Snapchat can allow 21+ wagering ads in the U.S. with geo and age filters, and with safe, clear copy. Read the rules here: Snapchat ad policies. Do not use playful themes that could appeal to minors. Keep bonuses clear with terms.

App environment

For iOS, respect ATT. If you need cross‑app tracking, you must ask the user. Details are here: Apple ATT. For store rules, read the gambling parts of Apple’s guide: App Store Review Guidelines, and Google Play’s real‑money policy: Google Play RMG policy. You may need local licenses listed on the store page.

Consent, age‑gating, and data hygiene

Use a Consent Management Platform (CMP) that supports TCF 2.2 and logs user choices. Many DSPs will check the TCF string at bid time. Read the spec: IAB Europe’s TCF 2.2. For cookie banners, keep it simple and fair. The UK ICO has good tips: ICO cookie guidance.

Age‑gating means more than a “Yes I am 18” pop‑up. Use soft blocks on first view, then verify age where law says so. If you run KYC on sign‑up, link that step in your funnel and do not reuse PII for ad targeting without clear consent.

Keep data clean. Store only what you need. Hash IDs if you share in a clean room. Remove minors and self‑excluded users from all lists. Log all changes with time stamps.

Measurement without breaking rules

As tracking shrinks, try methods that do not need user‑level IDs. Look at geo splits and time‑based holdouts. Run MMM on at least 6–12 months of data. Use modelled conversions in ad platforms with care and with clear notes to stakeholders.

If you share data with a platform, use a clean room where you can. One well‑known option is Google Ads Data Hub. It lets you query joined data without pulling raw user rows.

The red lines and the playbook

• Never target minors. Never hint at fast money or sure wins.
• Always show age labels (18+ or 21+ by law) and “Play Responsibly”. Link to help.
• Always fence to legal regions only. Block IPs from banned areas.
• Do not use dark patterns for consent. Keep opt‑out easy.
• Mark affiliate links with rel="sponsored". Follow the FTC Endorsement Guides for disclosures.
• Keep records: approvals, licenses, screenshots of ads, and consent logs.

For safer gambling tips to include on site and in ads, see BeGambleAware guidance. Add a clear link in your footer and on promo pages.

A safe place to send users

When you send traffic, choose pages that inform, show license status, and speak to adults. If you want a page that lists real, vetted promos with license‑first checks, you can point to the exclusive offers listed on CasinoReviewBank. Use a disclosure near that link. For example: “We may earn a fee from partners. This does not change how we rate license and safety.”

Persistent myths to drop now

• “Contextual means no consent needed.” Not always. Some tags still drop cookies. Check your CMP and scan your site.
• “Programmatic is dead for gambling.” Not true. It works in curated PMPs with the right pubs and logs.
• “ATT killed app marketing.” No. It changed it. You can still grow with SKAN, store SEO, and clean rooms.
• “If the platform approves my ad, I am safe.” Platform rules are not the law. You must meet both.

Regional watchouts (not full lists)

UK: Follow CAP/ASA rules on tone, minors, and targeting. Read the overview: CAP/ASA gambling ad rules. The regulator also posts guides on fair, open ads: UK Gambling Commission marketing.

EU: Consent must be free, informed, and specific. See the EDPB guidelines on consent. In France, CNIL has clear cookie rules: CNIL cookie guidance.

US: State law varies for sports betting and iCasino. Use 21+ where needed. The trade body code is a good base: AGA Responsible Marketing Code. New Jersey gives a feel for geo rules: NJ DGE geolocation.

Canada (Ontario): Ads sit under AGCO rules. No misleading promos. No minors. Check: AGCO iGaming ad standards.

Australia: Time‑of‑day and event rules may block some spots. See ACMA wagering ad rules.

Mini‑FAQ for legal and compliance

Q: Can we retarget site visitors?
A: Only where law allows and with clear consent. Pass a valid TCF 2.2 string in the EU. Age‑gate all flows.

Q: Can we show bonuses in ads?
A: Check local law. In many places you must add key terms and a link to full terms. Avoid extreme urgency claims.

Q: Do we need platform approval?
A: Often yes for real‑money ads on social. Expect reviews, license checks, and region locks.

Q: What age should we target?
A: 18+ in many markets, 21+ in the U.S. states that need it. When unsure, choose the higher age.

Q: How do we measure lift now?
A: Use geo/time holdouts, MMM, and clean rooms. Avoid user‑level joins without consent.

Pre‑flight checklist

• License verified and shown on site and landing pages
• Geo map set to legal areas only; state/country pages built
• Age gates live; 18+ or 21+ labels on all creatives
• CMP with TCF 2.2; consent logs tested across pages
• Creative copy checked for tone; no minors; clear T&Cs for promos
• Allowlists and PMPs locked in; platform approvals in place
• Measurement plan: holdouts or MMM; clean‑room access agreed
• Disclosures and rel="sponsored" on affiliate links; “Play Responsibly” link live
• Incident plan ready: who pauses, who appeals, who logs

Risk register: common failure points

• Retargeting in the EU without a valid TCF 2.2 consent string
• Broad age targeting on social; missing 21+ in U.S. states
• Open exchange buys that trip auto blocks on SSP side
• Bonus ads with unclear terms; complaints to ASA or AGCO
• Cookie banner that nudges “accept all” with dark patterns
• No proof of license on file when the platform team asks

A small reality check on creative

Keep the tone calm. Do not promise wins. Show control tools: deposit limits, time‑outs, help links. Plain words build trust and help with reviews. Avoid cartoon art or youth themes. Show real brand marks and license seals.

How to update this page and stay current

Policies change. Put a date stamp below. Plan a review each quarter. Re‑read key sources: Meta policy, Google Ads policy, local law pages linked above. If you spot a change, log it on a change log and update screens and checklists.

Change log

• Last updated: 2026‑06‑14 — Added table snapshot; refreshed links; added clean room note.

Closing notes

If this guide helps, share it with your legal and paid teams. If you have a case we can learn from, send details (minus PII). Stay safe, be clear, and build for adults in legal markets only. That mix brings stable scale.