Evolution Report Raises Fresh Questions Over iGaming Compliance in Restricted Markets
An unsealed, Evolution-commissioned report has reportedly found the supplier's games generated revenue in restricted markets, reviving questions about B2B compliance responsibility.
A compliance report that Evolution itself commissioned has become public for the first time, after Black Cube — the private intelligence firm Evolution has been suing for defamation since 2021 — filed the document in full as part of that ongoing New Jersey litigation on 8 September 2026. The report was prepared by industry consultancy Spectrum Gaming Group at Evolution's request, to examine allegations Black Cube had originally made about Evolution's presence in restricted and sanctioned gambling markets. Bloomberg, which reviewed the newly public document, reported that it found Evolution had a "complete absence of any ongoing examination" to ensure its casino-operator clients blocked players in restricted markets.
The report's release matters less because it introduces a brand-new allegation and more because of who commissioned it and what it did — and did not — manage to establish. Evolution asked Spectrum to test claims that had first surfaced in 2021, when Black Cube produced a dossier alleging the company operated in a range of prohibited and sanctioned jurisdictions. Evolution has always disputed the Black Cube material and describes the episode as a corporate smear campaign, a position that gained weight in 2025 when court filings and subsequent reporting identified rival supplier Playtech as the party that had funded Black Cube's original investigation.
What the newly public report actually shows is more layered than a simple confirmation or denial. According to Bloomberg's review and a 9 September regulatory announcement from Playtech — an interested party in the litigation, and one that has an evident stake in portraying the report unfavourably for Evolution — Spectrum's findings split into three categories: some Black Cube claims were corroborated, others were not substantiated, and a third set could not be resolved either way because Evolution reportedly did not supply data Spectrum had requested. That three-way split, rather than a clean "found" or "cleared," is the more accurate description of where the report actually lands.
The disclosure arrives more than two years after New Jersey and Pennsylvania regulators closed their own investigations into the original Black Cube allegations without taking corrective action against Evolution. That earlier outcome remains part of the story, but it does not automatically settle every question raised by the newly available material — a tension that runs through much of the reaction to this week's reporting.
What Did Evolution's Own Report Reportedly Find?
Reporting on the unsealed material indicates that Spectrum's most consequential finding concerned monitoring, not intent: according to Playtech's regulatory announcement, which quotes directly from the report, Spectrum concluded that Evolution "does not take any proactive steps" to confirm that customer-facing gambling operators were honouring the geographic restrictions written into their contracts. Bloomberg's independent review of the document reached a similar conclusion in different words, describing an absence of ongoing examination of operator compliance. Both accounts point to the same underlying issue: a gap between the restrictions Evolution's contracts imposed on paper and what the company did to verify those restrictions were actually being followed.
On market access specifically, reporting indicates Spectrum corroborated concerns that Evolution's content had reached operators or players connected to jurisdictions including Hong Kong, Singapore, the UAE and Saudi Arabia — markets where online gambling is generally prohibited or tightly restricted. It is worth being precise about what that means: the reporting available describes revenue Evolution received in connection with operators whose games were being accessed in those markets, which is a different claim from saying Evolution itself directly ran gambling operations there. The distribution chain between a B2B supplier and an end player, discussed in more detail below, is central to that distinction.
The Iran, Syria and Sudan allegations — the most legally serious of Black Cube's original claims, given the sanctions exposure they would imply — require particularly careful treatment. The available reporting does not support saying Spectrum cleared Evolution of these allegations. Rather, according to Playtech's account of the report, Spectrum was unable to confirm or refute whether gaming sessions had occurred in these jurisdictions because Evolution did not provide the session and revenue data Spectrum had requested for them. That is a materially different, and less favourable, position for Evolution than a finding of "no evidence" would be: it means the sanctions-related questions were left open rather than resolved.
Why the Newly Public Report Changes the Story
Confidential internal or commissioned reports rarely reach public view. Evolution had for months characterised the Spectrum report as exonerating, while declining to make it publicly available; according to Playtech's account, Evolution attributed that reluctance to concerns about disclosing sensitive proprietary financial information. Playtech disputes that explanation, arguing instead that Evolution's resistance reflected the report's compliance findings rather than any proprietary-data concern. Level.casino has not independently verified either account of Evolution's motivation, and readers should treat both explanations as contested rather than settled.
That context still matters for how the findings should be read. This is not a rival's dossier or a document of unknown provenance — it is an assessment Evolution paid for, from a specialist gaming consultancy, specifically to test allegations the company said were false. That gives the report's findings a different evidentiary standing than the original Black Cube claims carried on their own. At the same time, the report's own limitations — most notably its inability to resolve the Iran, Syria and Sudan questions for lack of data — mean it should not be treated as a complete or final word on the underlying allegations either.
None of this amounts to an admission of wrongdoing on Evolution's part. Commissioning an investigation is a standard corporate response to serious allegations, and the same report that identified compliance gaps also left central sanctions-related questions unresolved rather than substantiating them. What the disclosure does is bring an assessment that was previously confidential into public view, where it can now be examined directly by regulators, litigants and industry observers rather than filtered entirely through the competing characterisations of Evolution and Black Cube.
Evolution's Response and the B2B Defence
Evolution declined to comment directly on the newly public material, according to reporting on its disclosure. Its established public position on the broader controversy, however, is well documented and deserves fair treatment alongside the reported findings.
The company has consistently described itself as a B2B supplier of live dealer and RNG casino content, distinct from the licensed operators who hold the direct relationship with players. Under this contractual model, Evolution licenses its game streams to gaming operators, who are responsible for know-your-customer checks, deposit handling and ensuring the content is not offered to customers in jurisdictions where it is not permitted. Where an operator breaches those contractual terms, or a player circumvents geographic restrictions, the precise division of responsibility between supplier and operator is genuinely disputed — it is this contested boundary, rather than a settled legal answer, that the newly public report has reignited.
Evolution has also repeatedly pointed to the outcome of the original US regulatory scrutiny. The company has said that New Jersey and Pennsylvania regulators closed their investigations into the 2021 allegations in February 2024 without taking corrective action, and has cited language from the New Jersey Division of Gaming Enforcement indicating it found no evidence Evolution knowingly took illegal bets or made improper payments connected to prohibited jurisdictions. That regulatory history remains part of the public record and is relevant context, even though it predates the Spectrum report becoming public.
On compliance improvements, Evolution has pointed to changes made following a UK Gambling Commission settlement reached in July 2026 (discussed in more detail below), saying it had strengthened its technical measures and introduced enhanced ring-fencing to prevent its content reaching unauthorised operators. Chief executive Martin Carlesund said at the time that the company continuously refines its procedures in response to emerging risks.
How Can a Supplier's Games Reach a Restricted Market?
Understanding this story requires understanding how live casino content actually moves from a supplier's studio to a player's screen — and where the technical and contractual control points sit along that path.
Evolution produces and streams its live dealer and RNG games from centralised studios. Licensed B2C operators integrate that content into their own platforms, sometimes directly and sometimes via intermediary aggregators that bundle content from multiple suppliers for distribution to operators. Each additional link in that chain — operator, platform, aggregator — can create distance between the supplier and the eventual end user, and with it, gaps in visibility.
Geographic restrictions are typically enforced through a combination of contractual obligation and technical control. Suppliers generally require operators to block IP addresses associated with restricted territories and to conduct their own KYC checks confirming a player's actual location. In practice, IP-based geo-blocking is imperfect: a player using a VPN or other circumvention tool can make their connection appear to originate from a permitted jurisdiction, and aggregator relationships can make it harder for a supplier to see exactly which end-user websites are ultimately carrying its content.
This raises the question at the heart of the wider debate: if a supplier does not operate the consumer-facing casino itself, where should its responsibility begin and end? There is no single, universally accepted answer. Different regulators take different views on how much proactive monitoring a B2B supplier must perform versus how much can reasonably be delegated to contractual terms with licensed operators, and that divergence is itself part of why this story resonates well beyond Evolution's own case.
The Regulatory Context Is More Complicated
It would be a mistake to read the newly public Spectrum findings in isolation from Evolution's broader regulatory history, which cuts in more than one direction.
On one hand, US regulators in New Jersey and Pennsylvania examined the underlying Black Cube allegations and closed their investigations in February 2024 without taking corrective action. That outcome remains on the record and is a legitimate part of Evolution's defence. It does not, however, necessarily mean every question the Spectrum report raises has already been resolved; a closed investigation reflects the conclusions regulators reached on the evidence available to them at that time, not a guarantee that no further scrutiny could ever be warranted — particularly given that the newly public report indicates parts of its own inquiry were left incomplete.
On the other hand, the report becoming public does not automatically undo or override those earlier regulatory conclusions either. No evidence currently available indicates that any regulator has reopened a formal investigation specifically because of this week's disclosure, and it would be premature to assume that will happen. What can be said is that the newly public material gives regulators, litigants and industry observers direct access to findings that were previously confidential — material they can now evaluate on its own terms.
Why the UK Settlement Adds New Context
A separate and independently confirmed regulatory episode gives the current story additional weight. In July 2026, the UK Gambling Commission concluded that Evolution's content had been accessible through unlicensed operators serving British consumers, and reached a £4.75 million settlement with the company. The Commission's findings pointed to shortcomings in Evolution's risk assessment and supply-chain oversight — the kind of downstream monitoring failure that echoes, in a different jurisdiction, the compliance gaps reportedly identified in the Spectrum report.
Evolution's response to the UK case followed a similar pattern to its broader defence: it said the operators involved had actively evaded its restrictions and breached its terms of supply, and that it had terminated those relationships and introduced enhanced ring-fencing measures as a result.
Taken together, the UK settlement suggests that regulators may increasingly expect B2B suppliers to go beyond purely contractual safeguards and invest in more active, independent monitoring of where their content actually appears — rather than relying solely on operators to self-police. Whether that expectation hardens into a formal legal standard, and how consistently it would be applied across jurisdictions with very different regulatory traditions, remains an open question that this case alone does not resolve.
What Could This Mean for the Wider iGaming Industry?
Beyond Evolution's specific circumstances, the story touches on questions that matter across the B2B gaming supply chain.
Supplier responsibility. If contractual restrictions on operators are not, by themselves, considered sufficient by regulators, suppliers may face pressure to build independent verification into their compliance programmes rather than relying on customer attestations alone.
Aggregator oversight. Distribution through platforms and aggregators can create genuine blind spots between a supplier's studio and the final consumer-facing website. The case may increase scrutiny of these intermediary relationships and push suppliers to demand greater transparency from aggregation partners.
Technical enforcement. The disclosure could intensify interest in tools such as continuous website monitoring, IP and device-location intelligence, and VPN detection — technologies aimed at closing the gap between contractual restriction and actual enforcement.
Regulated-market expectations. As more of Evolution's own revenue mix shifts toward regulated markets, licensed operators may become more demanding about the compliance track record of the suppliers they integrate, treating supplier compliance history as part of their own regulatory risk management.
Industry governance. For the wider industry, the question raised by this case is less about any single company and more about visibility across the full B2B-to-B2C chain — from studio, to operator, to aggregator, to player — and who bears responsibility when that chain breaks down somewhere along the way.
What Happens Next for Evolution?
Evolution's defamation litigation against Black Cube, and its effort to bring Playtech into that case as the alleged funder of the original 2021 dossier, continues. The report's becoming public is likely to feature in how that litigation proceeds: the findings could become relevant to arguments before the court, although their precise legal significance will depend on the claims at issue, the evidence presented and how the court interprets both the corroborated and the unresolved portions of Spectrum's work.
Beyond the courtroom, the story will be worth watching for how investors, regulators and industry partners respond in the coming weeks. No confirmed new regulatory investigation tied specifically to this disclosure has emerged so far, and any assumption that one is coming would be premature. Evolution's own compliance upgrades, including the ring-fencing measures introduced after the UK settlement, are also likely to be cited as evidence that the company has already begun addressing the kinds of gaps the Spectrum report identified — even as the unresolved Iran, Syria and Sudan questions leave part of the original controversy still open.
The most important issue raised by this story may not be whether a single supplier can control every player or every operator on every continent. It is how much responsibility regulators — in the UK, the United States and elsewhere — increasingly expect global B2B suppliers to assume once their products cross jurisdictional boundaries they were never meant to reach. That is a question the iGaming industry will likely keep confronting well beyond this particular case.
For continuing coverage of this story and other developments across the sector, visit Level.casino News.
