£11,790m. That is Flutter Entertainment's group revenue for the year to 31 December 2024, as filed on the investor results centre on 4 March 2025. Inside that number sits a payments story most operator communications do not tell in plain terms: 88% of Entain's revenue now comes from locally regulated markets, Pix became the mandatory deposit rail for Brazil-facing operators on 1 January 2026, and the German GGL now runs a cross-operator deposit ledger that enforces a €1,000 monthly cap across every licensed brand a player touches. Future-proofing, on the public record, means engineering to those specific mechanisms — not slogans.
Segregated Player Funds
Segregated player funds mean the money you deposit sits in a bank account the operator cannot use to pay its own bills. That is the whole rule. What it does not mean, and what every operator marketing page blurs, is any specific level of protection in an insolvency. UKGC-licensed operators fall on a spectrum from "basic" (segregated but unranked in a wind-up) to "high" (held on trust with a defined ranking). You are supposed to be told the level in the terms; almost nobody reads it.
On Flutter's disclosure, player funds are segregated across every one of the group's tier-1 licences — UKGC, MGA, NJDGE, AGCO Ontario. The group's investor centre treats this as a control-environment line, not a marketing claim. Entain reports the same posture across its 27 brands. The signal to read for is not the word "segregated." It is the phrase "held on trust" and the level rating attached to it in the operator's licence conditions on the UKGC public register.
Fieldnote: the register is at gamblingcommission.gov.uk. It is free. It takes ninety seconds to look up any operator you already deposit with.
Pix Rail Mandate
Pix is the Brazilian central bank's instant-payment rail. From 1 January 2026, under the Secretaria de Prêmios e Apostas (SPA) framework published by the Ministério da Fazenda, it is the only permitted deposit and withdrawal channel for any operator holding a Brazilian licence. Not "preferred." Mandatory. Cards, boletos, and any offshore wallet route are outside the licence perimeter.
Two things follow that most trade press coverage misses. First, an operator that wants Brazilian revenue must run a Brazilian subsidiary — the SPA licence requires local incorporation and a domestic settlement account. Flutter, Entain, and Bet365 have all filed their Brazilian entities. Second, the licence tax is 12% of GGR at the SPA layer, which is a receipt-grade number, not a rounded estimate.
For operators, "future-proofing" here means one specific engineering job: an integration with the Pix instant-settlement protocol wired to a Brazilian bank identifier, running behind KYC controls that accept a CPF as the primary identity document rather than a passport. You either have that stack live on 1 January 2026 or you are not in the market.
OASIS Cross-Operator Ledger
OASIS is the German self-exclusion register operated by the Gemeinsame Glücksspielbehörde. What makes it different from most exclusion tools is that the GGL also runs a live cross-operator deposit ledger. A registered player's monthly deposits are summed across every German-licensed brand they touch. The cap is €1,000 per month, total, everywhere.
That is a real engineering constraint, not a policy paragraph. Every German-licensed operator has to query the ledger in real time before accepting a deposit, and reject the deposit if the combined figure would exceed the cap. There is no way to circumvent it by opening a second account at a competitor. The ledger is the single source of truth.
For operators, the "future-proofing" line item is the OASIS API integration and its uptime SLA. If the query endpoint is unavailable, the safe posture is to reject the deposit — because accepting one that later turns out to breach the cap is a licence-condition breach. This is one of the specific mechanisms behind the 88% regulated-markets figure Entain reports in its 2024 annual filing.
GAMSTOP Deposit Blocking
GAMSTOP is the UK equivalent of OASIS at the exclusion layer, but it stops short of the cross-operator deposit ledger. According to GAMSTOP's own disclosures, the register covers every UKGC-licensed online operator automatically, holds 0.42 million registered users, and enforces exclusion terms of six months, one year, or five years — chosen by the user, not the operator.
The mechanism is a deposit block, not a deposit cap. Once you register, every UKGC operator's KYC layer receives a hit against the GAMSTOP list and must refuse to open the account or deposit funds. Registration volume rose 35% year-on-year through 2024. That is a demand signal every operator's payments team now models against churn.
10-K page reference: Entain plc Annual Report 2024, discussion of Safer Gambling controls, filed on the group's investor site as entain-plc-ar24.pdf. The report ties GAMSTOP compliance into the operator's licence-conditions narrative, not into the customer-experience narrative. That is the correct place for it.
Reality Check Cadence
Reality check cadence is the default interval at which a UKGC-licensed operator interrupts an active session to remind the player how long they have been logged in and how much they have wagered. The default is 60 minutes. That number is not aspirational — it is coded into Social Responsibility Code provisions the UKGC enforces via the public register.
On Flutter's own disclosure, the group runs the 60-minute default and reports that 47% of UK customers have adopted a deposit-limit tool on top of the reality check. That is a receipt-grade adoption figure, published in the FY2024 results pack, not a marketing rounding.
For payment-infrastructure teams, this term matters because the reality-check interrupt has to be enforced by the same session-state layer that authorises deposits. If a player hits their reality-check breakpoint mid-deposit, the deposit UX has to pause, surface the prompt, and require explicit continuation. Operators that treat this as a marketing overlay rather than a payment-flow interrupt fail Social Responsibility Code audits. That is where the enforcement fines come from.
AML Deposit Pattern Controls
AML deposit pattern controls are the operator's obligation to spot money that does not look like a normal player's money. Under UKGC Social Responsibility Code and equivalent MGA and AGCO rules, the deposit rails have to feed a real-time monitoring layer that flags unusual patterns — rapid successive deposits, deposits from multiple cards to the same account, sudden step-changes in average deposit size, deposits from a source of funds that has not been verified against declared income.
The enforcement record tells you the standard. On 17 August 2022, Ladbrokes and Coral (Entain-owned) paid a £17m regulatory settlement for social-responsibility and anti-money-laundering failings. The published finding cites inadequate AML controls for customers with unusual deposit patterns. On 2 March 2023, Sky Betting and Gaming (Flutter UKI) paid £1.17m for related failings under the same enforcement thread. On 12 December 2022, Bet365's Hillside licensee paid £582,120 for parallel issues.
Fieldnote: those three settlements sit adjacent on the enforcement register. They read like the same audit template applied to three different balance sheets.
Regulated Markets Revenue Share
Regulated markets revenue share is the portion of an operator's top line that comes from jurisdictions where the operator holds a tier-1 or tier-2 licence and pays local tax. Everything else — grey-market, sub-licensed, or "dot-com" traffic — sits on the other side. This is the single most useful number in an iGaming annual report, and almost no marketing page mentions it.
Entain reports 88% regulated-markets revenue in its 2024 annual filing. The remaining 12% is grey-market exposure — the risk line the equity market cares about. Flutter reports 5% grey-market exposure on group revenue of £11,790m. Bet365 reports 22%. Those numbers are all on the record and they diverge for structural reasons: Bet365 operates in 170 countries under a private ownership structure that does not answer to public equity discipline, while Flutter's 22-state FanDuel footprint runs on tier-1 US licences with 0% grey-market share.
The "future-proofing" read on this term is simple. Every point of grey-market revenue an operator carries is a point that could evaporate under a single regulator action. The regulated-markets share is the resilience number.
Cross-Border Settlement Exposure
Cross-border settlement exposure is the risk that arises when a player deposits in one currency, plays in another, and withdraws to a third — and the operator carries the FX and clearing risk in between. It is the term where all the earlier terms compound. If you have segregated player funds, a Pix rail, an OASIS ledger, and a GAMSTOP block all engineered correctly for their respective jurisdictions, cross-border settlement is what stitches them together without breaking any of them.
The receipt-grade example is Flutter's 2020 merger with The Stars Group at USD 12.2 billion, which folded PokerStars' global player pool into the Flutter payments stack. Entain's Deferred Prosecution Agreement with the UK CPS, announced on 5 December 2023 for £585m, is the counter-example: it relates to the former Turkey-facing business of Headlong Limited, a subsidiary sold in 2017, and it is the single largest illustration on the public record of what cross-border settlement exposure costs when it is not future-proofed.
For an operator payments team, the resilience test is not "does the deposit clear." It is "does every downstream regulator recognise the settlement route as compliant with their local rules." That is a harder engineering job than the marketing pages ever explain.
This piece did not cover three things worth naming. It did not cover the Ontario iGO framework in detail — the AGCO's 49-operator register is a full case study on its own. It did not cover the Portuguese SRIJ tax structure, which imposes a 25% online-casino rate and an 8–16% sports-betting range that materially shapes market entry. And it did not cover the US state-by-state payments patchwork under NJDGE, PGCB, and the other state regulators — that is a jurisdictional matrix that deserves its own investigation.