iGaming Playbook — Casino, Slots, Sportsbook (2026)

TL;DR — iGaming is the most ban-prone affiliate vertical in 2026. Meta requires written authorization. Google accepts casino ads only in licensed countries. TikTok bans gambling globally. Push is the safest channel for unlicensed grey-hat traffic. With TrackNCloak's 3-layer bot detection + IPQS gate, customer ban rate drops from 75-90% to 40-55% per month — that's the difference between a profitable campaign and a Black-Friday-style account graveyard.

This playbook covers exactly what works for casino, slots, and sportsbook campaigns in 2026, channel by channel, geo by geo, and ban-recovery tactic by tactic.

1. Know which platforms forbid iGaming outright

The rules are different on every platform — knowing which one you're up against decides 80% of your ban rate before you write a single creative.

• Meta (Facebook + Instagram) globally requires written authorization for real-money gambling ads and reviews every advertiser individually. Without a Meta-issued letter of approval, your account WILL be flagged within hours.
• Google Ads accepts casino/sportsbook ads ONLY in licensed countries (UK, Italy, Sweden, Spain, Australia, etc.) and only with platform-specific certification.
• TikTok bans gambling globally — no exceptions, no whitelist, no application process.
• Native (Taboola, Outbrain) is generally OK but landing pages must show age-gate and responsible-gambling links.
• Push (PropellerAds, ClickAdu) is the safest channel for unlicensed grey-hat iGaming traffic.

2. Pick the right traffic source per geo tier

Geo + traffic source must be matched. A mistake here means immediate ban regardless of how good your cloaker is.

Tier	Geos	Best traffic source	Why
Tier-1 licensed	UK, IT, SE, ES, AU	Google Search Ads	Regulated competition keeps CPCs low; high search-intent
Tier-2	DE, NL, CA	Native + Push	Lower scrutiny than Meta, decent volume
Tier-3	LATAM, SEA, MENA	Push exclusively	Meta/Google ban within 24h regardless of cloaking

Avoid social-proof landers in regulated geos. "$10,000 won by Sarah from London" reads as "guaranteed wins" messaging to the AI moderator and gets you flagged in minutes.

💡 Where the money is hiding: casino-affiliate-grade traffic comes from Slotmaster, MyLead, AffPapa, and other iGaming-specific networks. Generic CPA networks rarely have geo-targeted casino offers paying over $80 CPL.

3. Configure TrackNCloak for iGaming

In your Cloak Rule editor, the iGaming-tuned configuration is:

• Enable Bot Detection — all 3 layers (Reviewer + JS Fingerprint + Behavioral).
• Enable VPN, Proxy, and Tor blocking.
• Set Allowed Countries to your target geos ONLY. One country per cloak rule is best — the moment you add a second geo you're inviting cross-contamination if a leak happens.
• Enable IPQS fraud-score gating at 75. Lower scores accept too many borderline visitors; higher scores starve real traffic.
• Critical: enable Block reviewers. iGaming reviewers run from datacenter IPs and recognized referrer patterns — this is the layer that stops Meta's automated scan from ever seeing your money page.
• Set your safe page (white page) to a generic blog post about responsible gambling or sports news. Never a "compliance message" page — that's a giveaway and reviewers know to flag it.

💡 Pro tip: a two-step JS-Fingerprint flow on the safe page reduces ad-platform AI scrutiny by another 30-40% based on customer data. It looks like a real page-load delay rather than an instant redirect.

4. Design your landing pages

Money page must include:

• 18+ logos
• Responsible-gambling link
• License badge (real if you have one, stylized otherwise)
• A CTA button labeled "Play Now" or "Sign Up" — never "Win Now" or "Guaranteed Wins"

Safe page should be a blog-style page about sports analysis, casino rules history, or generic gambling education. Real content, not lorem ipsum — Meta reviewers spend 4-8 seconds on it.

Use TrackNCloak's Landing Pages module to A/B test 3-5 money-page variants. Winning variants often differ by 2-3× in conversion rate — same offer, same traffic, completely different revenue.

5. Postback + payout tracking

iGaming advertisers usually pay one of two ways:

• RevShare — percentage of player losses, monthly
• CPA — one-time on FTD (First Time Deposit)

Set up two custom conversion goals in TrackNCloak:

1. Registration (free signup) — fires on form submit
2. FTD (real-money deposit) — fires on first deposit confirmation

Networks like Smartlink Direct send dual postbacks; configure both URLs in your offer settings. Track "Deposit value" as the payout field for accurate ROI.

6. Manage ban rate — the part that actually decides profit

Expect 30-60% account ban rate per month in unlicensed geos even with perfect cloaking. This is the cost of doing iGaming. Your job is to minimize it, not eliminate it.

The tactics that move the needle:

• Buy aged Facebook accounts (90+ days old, 1-2 friends, profile photo, posting history). Fresh accounts trigger automated suspicion within 6-12 hours.
• Warm new accounts for 3-4 days with $5 boost posts on innocuous content before launching cloaked ads.
• One ad account per offer per geo — never mix. When (not if) the account dies, the blast radius is contained.
• Rotate payment methods every 7-10 days. Different cards from different agencies. The card you used to launch the campaign is the card Meta uses to fingerprint you forever.
• Set TrackNCloak daily click caps on every campaign. If a leak happens at 02:00 AM, you wake up to a $200 burn instead of a $2,000 one.

💰 Real customer numbers: TrackNCloak users running iGaming with our 3-layer bot detection + IPQS gate report a 40-55% monthly ban rate vs 75-90% without cloaking. That 20-30% delta is real money saved on fresh accounts — for an operator running 20 accounts a month at $80/account, that's $320-$480 saved every month before you count the lost ad spend on banned accounts.

7. The boring stuff that prevents the most bans

These are the small habits that separate operators from beginners.

• Test your tracking URL through the Card Validator before launching: facebook.com/tools/debug/sharing. If it returns errors, Meta will reject the ad on submission.
• Keep your safe page fresh — change a paragraph every 2-3 weeks. Stale safe pages get fingerprinted across accounts.
• Use TrackNCloak's audit log (workspace → audit log) to track who changed what cloak rule and when. When a campaign breaks, you'll know who did it.
• Watch the Live events feed during launch — every red BLOCKED row is a reviewer hitting your URL. Zero red rows in the first hour usually means the platform hasn't started reviewing yet.

iGaming is not a vertical you walk into casually. But it's one of the highest-paying verticals on the internet, and with the right infrastructure the math works.