Running Paid Media for Gambling and Sportsbook in 2026: The Rules That Actually End Accounts
Google now revokes gambling certificates across an entire manager account. What certification really requires, why affiliates are allowed on Google and banned on Meta, the 21-vs-18 age split, and the verification rule that permanently forfeits your right to appeal.
- Google's published gambling policy contains no list of eligible US states — that list lives inside the certification form, which is not public.
- Affiliate and aggregator sites are explicitly allowed for real-money gambling on Google and explicitly banned for social casino, with suspension on detection and no prior warning.
- Meta's written minimum age is 18, not 21; the US 21+ requirement comes from state law and from Google's separate policy.
- Google permits national targeting for sports betting ads on YouTube while requiring state-by-state targeting everywhere else.
- Three failed advertiser-verification attempts permanently forfeit the right to appeal a suspension — the highest-consequence rule in the category.
- From 23 March 2026, manager accounts with a significant volume of revoked gambling certificates lose the ability to apply for new ones, with no published threshold or reinstatement path.
From 23 March 2026, a single client's revoked gambling certificate can cost an agency its entire book of business. Google's certification eligibility update states that manager accounts with "a significant volume of gambling certificates revoked from accounts under its management" lose the ability to apply for new certificates and have existing certifications revoked (Google Ads Policy Help). Google has not published a threshold, a cure period or a reinstatement path.
That is the shape of this category in 2026. The written rules are public and mostly stable. The enforcement mechanics around them are not, and they are what actually ends accounts.
- Google's published gambling policy contains no list of eligible US states — the list lives inside the certification form, which is not public.
- Affiliate and aggregator sites are explicitly allowed for real-money gambling on Google, and explicitly banned for social casino. Most guides state this backwards.
- Meta's written minimum age is 18, not 21. The US 21+ obligation comes from state law and from Google's separate policy.
- Google permits national targeting for sports betting ads on YouTube, while requiring state-by-state targeting everywhere else.
- Three failed advertiser-verification attempts permanently forfeit the right to appeal a suspension.
What does Google actually require to run gambling ads?
Three conditions apply to every gambling ad and its destination: target only approved countries, display responsible-gambling information on the landing page, and never target minors (Google Ads Policy Help). Certification sits on top of that, and it is per-country — "if you want to target more than one country, submit a separate application form for each country."
The structural trap is the one Google states twice on the same page: an account can be certified for online gambling or for social casino games, not both. Operators running both product lines need separate accounts, and finding this out after a certification is granted means rebuilding an account structure with live campaigns in it.
Domain eligibility is narrower than most teams assume. Sites on free platforms are ineligible, as are subdomains whose root domain belongs to a third-party host, and second-level domains the advertiser does not own and operate. From 14 September 2026 Google extends this across every category under the gambling policy: "the domain must be directly owned and controlled by the business" (Google Ads Policy Help).
The US rules that differ from what gets repeated
Google's US gambling ads may not target users under 21 or users outside the states where the advertiser is licensed. Daily fantasy sports is the exception — DFS is 18+, requires an adult-only landing page disclaimer, and prohibits any implied school or university affiliation. A DFS advertiser targeting a state that does not license DFS must hold a licence in at least one state that does.
Two details are worth media-planning attention. First, Google "allows national targeting for ads promoting sports betting on YouTube" — one sentence in the policy that removes the state-by-state constraint on a major inventory source. Second, the policy page carries no US state eligibility table at all. The only sub-national jurisdictions named are Nigerian states and Argentine provinces. Any competitor article reproducing "Google's list of approved US states" is reproducing something that is not on the page.
Affiliates: the rule everyone states backwards
Google's policy permits "aggregator or affiliate sites that provide information about, or a comparison of, other gambling services" for real-money gambling. The conditions are that the destination cannot offer gambling itself, cannot link to gambling services it owns, and the promoted products must hold the licences the country requires.
For social casino, the same policy bans affiliate and aggregator promotion outright — and treats violations as egregious, with accounts suspended "upon detection and without prior warning." Same policy document, opposite rules, and the difference decides whether an affiliate programme is a channel or an account-level risk.
How is Meta different from Google here?
Meta requires authorization before any online gambling ads run, requested through the Authorizations and Verifications tab in Business Suite with evidence that the activity is appropriately licensed by a regulator (Meta Transparency Center). Advertisers must declare intent before entering a new jurisdiction, and Meta explicitly disclaims responsibility for how authorized accounts comply with local law.
The scope is wider than Google's. Meta's authorization requirement reaches affiliate and aggregator landing pages "even if there is no opportunity to gamble or game directly on that page," plus games where money or value forms both the entry and the prize, including digital currencies, and games offering a limited trial that requires payment afterwards.
On age, Meta's written standard says: "At a minimum, ads may not target to people under 18 years of age nor unsupported gambling markets." There is no 21+ rule and no country age table on Meta's public policy. Google's page does say 21 for US gambling. The two platforms' written standards genuinely differ, and the US 21+ obligation is imposed by state law rather than by Meta.
Meta's social casino carve-out — free-to-play games with no money or money's worth — collapses on a single condition: "if virtual prizes can be traded on secondary markets for value, the gambling policy applies instead." That is the same mechanism that removed the social-casino path from sweepstakes operators on Google, and it sits unexercised in Meta's text.
What happens when an account is suspended?
Google's 2025 Ads Safety Report puts 8.3 billion ads blocked or removed and 24.9 million advertiser accounts suspended, with over 99% of blocked ads caught before anyone saw them (Google, 2026). What the report does not contain is a gambling breakdown. There is no published "gambling ads blocked" figure, on any platform, and Meta publishes no gambling enforcement statistics at all.
The appeal mechanics are documented and worth reading before you need them (Google Ads Help). Appeals run through Policy Manager, with a minimum six-month window to file. Google states that detected misuse of the appeals function suspends processing of certain appeals for seven days.
The rule that ends businesses is quieter: advertisers must complete advertiser verification to appeal, and if identity cannot be verified after three attempts, no appeal is permitted. That is permanent. In a category where the account carries the certification, it is the highest-consequence operational rule on the platform, and it turns document hygiene into a business-continuity control.
Every "approval takes 2–4 weeks" or "appeals resolve in 21 days" figure circulating for this category traces back to agency blogs. No platform publishes a certification or appeals SLA for gambling. Plan the runway, do not plan the date.
What do the app stores require?
Apple's guideline 5.3.4 requires real money gaming apps to hold licensing and permissions in every location of use, be geo-restricted to those locations, and be free on the App Store (Apple App Store Review Guidelines). Guideline 5.3.3 separately bars using in-app purchase to buy credit or currency for real money gaming of any kind. Guideline 5.1.1(ix) requires apps in highly regulated fields, gambling included, to be submitted by the legal entity providing the service rather than an individual developer.
Google Play's requirements run parallel: a valid licence for every country, state or territory of distribution, no product type exceeding the scope of that licence, geo-blocking for uncovered areas, an Adult Only rating or IARC equivalent, free download with no Play in-app billing, and responsible-gambling information displayed clearly (Google Play Developer Policy). Daily fantasy sports runs on a separate application track. Neither store publishes a country list on the policy page.
Why did sweepstakes stop being the workaround?
Because the states closed it faster than the platforms did. Across 2025, more than 100 cease-and-desist letters went out to sweepstakes operators nationally (iGaming Business, 2025). New York's attorney general sent 26 in a single action and all recipients reportedly exited the state. Louisiana's governor vetoed a ban bill, then the state's Gaming Control Board issued 40 letters anyway.
Enforcement has not slowed. The Michigan Gaming Control Board issued 45 cease-and-desist orders in the four months to April 2026, its largest single sweep (Michigan Gaming Control Board, 2026), after 12 in December 2025 and three in November 2025.
The change that matters for media buyers specifically is California's AB 831, passed unanimously by both chambers and effective 1 January 2026, which extends liability beyond the operator to affiliates, vendors and payment providers. Florida's pending HB 591 would make promotinginternet gambling a third-degree felony. Regulatory exposure in this category is moving from the operator to the person buying the media — which is a different insurance conversation, a different contract, and a different set of clients you can accept.
What does acquisition actually cost?
Nobody credibly knows, and that is the honest answer. Every widely-circulated "average sportsbook CAC" figure traces to affiliate networks, tracking vendors and agencies with a commercial interest in the number, none with a stated methodology, sample size or date range. There is no audited cost-per-depositor benchmark for US real-money gaming.
What exists is operator disclosure. DraftKings reported FY2025 revenue of $6,054.5m against $4,767.7m in 2024, with Q4 2025 sales and marketing of $442.6m, up 20% year over year (DraftKings FY2025 annual report). Flutter has stopped disclosing a dollar CAC entirely, reporting payback period against a stated 24-month threshold instead.
If you need a number, derive it: external marketing spend from the 10-Q or 10-K divided by disclosed new-customer counts. It will be rough, it will be yours, and it will beat a vendor figure with no methodology behind it. The same discipline applies to your own reporting — we cover the measurement side in our post on attribution when the funnel goes dark.
Is the channel shrinking?
On television, measurably. The American Gaming Association reports sports betting ad volume down for a fourth consecutive year — 1% year over year and 27% below the 2021 peak, with TV ad units down 9% and nearly half the 2021 count, using Nielsen Ad Intel data (American Gaming Association, 2025). Sports betting accounts for roughly 0.9% of total TV ad spend, against about 1.5% for alcohol. For every sports betting TV ad there are around 39 pharmaceutical ads.
Read alongside the state-level tightening, the picture is a compliant channel contracting under its own compliance load while the categories around it do not. That is not an argument to leave. It is an argument that the advantage in this vertical has moved from creative and bidding to whoever can keep certification, domain control and verification documents intact across jurisdictions for years at a time.
Our performance marketing team runs multi-jurisdiction paid media where certification, geo-targeting and landing-page compliance are part of the media plan rather than a legal review after launch.
What should you verify before using this Paid Ads guide?
Before acting on running paid media for gambling and sportsbook in 2026, verify the current rules or platform behavior with the Google Ads Help. The practical answer depends on your business model, state, turnover, documents, software stack, and whether the decision affects tax, customer data, paid media spend, or a production workflow.
Use this article as a working checklist, then confirm campaign policy, billing settings, attribution windows, conversion tracking, and platform changes. In our audits, most expensive mistakes do not come from ignoring the whole process. They come from one stale assumption, one mismatched address, one missing event, or one automation path that nobody tested after launch.
| Checkpoint | Why it matters | Where to confirm |
|---|---|---|
| Current rule or platform status | Limits, forms, policies, and APIs can change after a blog update. | Google Ads Help |
| Your exact business case | A local shop, freelancer, D2C store, agency, and SaaS team rarely need the same next step. | Documents, invoices, campaign data, analytics setup, or workflow logs |
| Implementation evidence | The safest campaign decision is backed by proof, not memory or screenshots from an old setup. | Portal acknowledgement, dashboard export, invoice sample, test lead, or error log |
How do we apply this in real business work?
We start with the smallest decision that can be verified. For compliance work, that means matching PAN, address, bank, invoices, and portal status before filing. For websites, marketing, analytics, and automation, it means testing the real user path from first click to final record. The boring checks catch the costly failures.
A useful rule: if a claim changes money, tax, reporting, or customer communication, keep evidence for it. Save the acknowledgement, export the report, test the form, and note the date you verified the source. That gives you a clean trail when a client, officer, platform, or internal team asks why the setup was done that way.
When should you get expert review?
Get expert review when the next action can create tax exposure, lost reporting data, ad waste, broken customer communication, or production downtime. A simple self-check is enough for low-risk learning. A filed return, new registration, tracking migration, paid campaign restructure, or live automation deserves a second set of eyes before it affects customers or records.
How often should this be rechecked?
Recheck the decision whenever your turnover, state, product mix, campaign budget, website stack, analytics property, or workflow ownership changes. Also recheck it after major portal updates, platform policy changes, annual filing deadlines, and vendor migrations. The guide is useful today only if the facts behind it still match your business.
What is the fastest safe way to decide?
Write the decision in one sentence, list the proof needed for that sentence, and verify only those items first. This keeps the work focused. If the proof confirms the decision, proceed. If one item is unclear, pause and resolve that point before changing filings, campaigns, tracking, website code, or automation logic.
What can go wrong if you skip verification?
The usual failure is not dramatic at first. It looks like a rejected application, a wrong tax invoice, a missing conversion, a duplicate lead, a broken report, or a workflow that silently stops. Those small failures become expensive when nobody notices them until month-end reporting, filing day, or a customer escalation.
What evidence should you keep after making the change?
Keep enough evidence to reconstruct the decision later. For a compliance topic, that usually means the application reference number, registration certificate, invoice sample, return acknowledgement, payment challan, notice reply, or source link checked on the day of filing. For a website, campaign, analytics setup, or automation, keep the before-and-after screenshot, test submission, dashboard export, webhook log, and the exact setting that changed.
This matters because most business fixes are revisited months later, when nobody remembers the original reason. A short evidence trail makes audits faster, handovers cleaner, and vendor conversations more precise. It also keeps the advice in this guide tied to your real operating context instead of becoming a generic checklist that gets copied without review.
- Date checked: record when the official source, dashboard, or portal screen was reviewed.
- Business context: note the entity, state, product, campaign, property, or workflow affected.
- Proof of action: save the acknowledgement, report export, test result, or live URL.
- Owner: assign one person to re-check the item when rules, tools, or business volume change.
Which next step should you take after reading this?
Turn the article into one action list. Mark what is already true, what needs proof, and what needs expert review. If you want to go deeper, compare this guide with Performance Marketing, Google Ads Management, and Ads Campaign Audit. Then update the decision only after the official source and your own records agree.
Frequently asked questions
What does Google require to advertise gambling?
Three conditions apply to every gambling ad: target only approved countries, display responsible gambling information on the landing page, and never target minors. Certification sits on top and is granted per country, so targeting multiple countries means submitting a separate application for each. An account can be certified for online gambling or social casino games but not both, so operators running both product lines need separate accounts.
Are affiliate sites allowed to advertise gambling on Google?
For real-money gambling, yes. Google's policy permits aggregator or affiliate sites that provide information about or comparison of other gambling services, provided the destination does not offer gambling itself, does not link to gambling services it owns, and the promoted products hold the required licences. For social casino the same policy bans affiliates outright and treats violations as egregious, suspending accounts on detection without prior warning.
Does Meta require gambling ads to target 21 and over?
No. Meta's written standard says ads may not target people under 18 years of age nor unsupported gambling markets, with no 21+ rule and no country age table on its public policy page. Google's policy does specify 21 for US gambling. The US 21+ obligation is imposed by state law rather than by Meta, so the two platforms' written standards genuinely differ.
What happens if my gambling ad account is suspended?
Appeals run through Policy Manager with a minimum six-month window to file, and Google states that detected misuse of the appeals function suspends processing of certain appeals for seven days. The critical rule is that advertisers must complete advertiser verification to appeal, and if identity cannot be verified after three attempts no appeal is permitted at all. That outcome is permanent.
Why did sweepstakes casinos stop being a workaround?
State enforcement closed it faster than the platforms did. More than 100 cease-and-desist letters went to sweepstakes operators nationally during 2025, New York's attorney general sent 26 in a single action, and the Michigan Gaming Control Board issued 45 orders in the four months to April 2026. California's AB 831, effective January 2026, extends liability beyond the operator to affiliates, vendors and payment providers.
What is a realistic customer acquisition cost in real-money gaming?
There is no audited benchmark. Every widely-circulated sportsbook CAC figure traces to affiliate networks, tracking vendors or agencies with a commercial interest and none states a methodology or sample size. The defensible approach is deriving it from operator disclosure — external marketing spend in a 10-Q or 10-K divided by disclosed new-customer counts. DraftKings reported FY2025 revenue of $6,054.5m with Q4 sales and marketing of $442.6m.
Let's talk about your business.
Tell us what you're working on and where you want to go. We'll put together a plan. No obligation, no sales pitch.
- Free 30-minute call
- A plan built around your goals
- No obligation, no pressure
- Your own account manager