New York’s Gaming Commission has proposed a set of rules that link biometric age checks, limits on AI marketing, and predefined behavioral triggers into one package of protections for the state’s growing sports-betting market. The draft — released after Governor Kathy Hochul’s 2026 State of the State address — is open for public comment through May 15, 2026.
The specific risks regulators say they’re fixing
The draft targets three distinct threats: underage access, algorithmic encouragement, and rapid escalation of harmful play. NYSGC Chair Brian O’Dwyer has argued that mobile wagering’s reach makes each of these more urgent — minors have been found to use family devices and legally established accounts to gamble, and AI-powered personalization can amplify risky patterns.
Beyond protecting minors, the rules expand accountability: adults who knowingly help underage people gamble could face permanent bans from all legal gambling in New York, a penalty that takes enforcement responsibility off just the platform and onto social actors and household members.
How biometric checks, device registration, and geolocation are supposed to work
The draft would require operators to collect biometric data at account creation and again at wager placement to confirm the user is 21 or older. Device registration and geolocation controls are layered on to stop minors using a parent’s phone or a friend’s account from placing bets.
Those technical controls have two immediate practical consequences: higher upfront compliance and operational complexity for operators, and new privacy and data-retention questions for regulators and vendors. The NYSGC has asked for comment on the biometric implementation details — what biometric modalities are allowed, how long data can be stored, and what vendors qualify — making those points central in the formal comment period through May 15, 2026.
AI marketing ban, permitted safety AI, and the activity-trigger ladder
Regulators would bar AI-driven personalized promotions and wager suggestions while still allowing machine learning systems to monitor accounts for harm signals. That carve-out treats AI as a safety tool but not a sales engine.
| Detected Activity | Suggested Operator Response |
|---|---|
| Large deposit or unusually large single bet | Educational nudge; messaging about limits |
| Rapid escalation in bet size or frequency | Require viewing of responsible-gaming content; offer voluntary limits |
| Repeated canceled withdrawal requests | Initiate direct contact; temporary hold on withdrawals; account review |
| Extended, continuous gambling sessions | Session breaks, stronger intervention, possible referral to treatment |
The draft lays out an escalation path that moves from nudges to mandatory education, short suspensions, and referral to professional treatment depending on the trigger and the operator’s assessment. That tiered approach is explicitly intended to preserve normal play while opening clear thresholds for intervention.
What operators and users should do now — checkpoints and practical limits
Operators should treat this draft as a design and procurement deadline: integrate vendor evaluations for biometric providers, map marketing stacks to ensure AI-based personalization can be disabled or re-scoped, and build or buy real-time monitoring capable of the activity triggers listed above. Smaller operators will likely face the biggest feasibility gap because of one-time integration costs and continuous geolocation enforcement.
For players, the most tangible change will be more friction at sign-up and occasional forced pauses in play. If you’re a high-frequency bettor, expect added verification steps and greater likelihood of temporary account holds if your activity matches one of the draft triggers.
Short Q&A
When do these proposals become final? The NYSGC is accepting comments through May 15, 2026; final decisions will follow the public comment review and potential revisions, but no firm date is set in the draft.
Is all AI banned? No — the draft bans AI-driven personalized marketing and wager suggestions but explicitly allows AI systems used for behavioral monitoring and safety interventions.
What should stakeholders focus their comments on? Key topics include which biometric methods are required or prohibited, data-retention and vendor rules, and the precise scope and thresholds for the activity triggers and permanent adult bans.
