US iGaming State-by-State 2026 Mid-Year Update: Legality, Bills, Operator Playbook

As of May 2026, online sports betting is authorised in 39 states plus DC. Online iGaming (casino) is authorised in 8 states. Six states moved on either authority during H1 2026: Maine and Alabama advanced sports betting bills (Maine awaiting governor signature, Alabama referendum scheduled November); North Carolina expanded its sports-betting framework with online casino discussion; Maryland's iGaming bill moved through committee for the second year running. Three states have iGaming bills mid-flight that may close in 2026: New York, Illinois, and Indiana. The pace of new state authority is modest compared with the 2019 to 2022 sports-betting expansion, but mid-year movement in 2026 was material enough to update operator planning.

This update is structured for operators planning multi-state affiliate programs. We focus on what is legal, what is in flight, how affiliate marketing works per state, and the multi-state operator playbook. We do not provide legal advice; we provide a planning baseline. State law changes and operator counsel should validate before action.

Current legal landscape: state-by-state status

The table below reflects state authority as of May 2026. iGaming column indicates online casino legality; Sportsbook column indicates online sports betting; Lottery indicates online lottery sales; DFS indicates daily fantasy sports. 'Limited' indicates partial authority (e.g., retail-only or tribal-only). 'Authorised' indicates online B2C operation by licensed operators. 'Pending' indicates an active bill or referendum.

Utah and Hawaii remain the holdouts on all forms of regulated online gambling. California and Texas remain the largest unbottled markets, both with sports-betting referendums having failed in prior cycles. Florida operates a tribal compact model under which Hard Rock Bet has exclusivity. The table is non-exhaustive (some smaller states omitted); operators planning entry should validate the latest position with state regulators directly.

H1 2026 expansion highlights: which states moved

Six developments materially affect operator planning for the second half of 2026.

1. Maine (LD 1234, May 2026): Sports betting bill passed the Maine Senate 22 to 13 on 10 May 2026. Governor signature expected. Launch timeline: Q1 2027 for retail, Q2 2027 for online. Affiliate marketing permitted under operator licence; affiliate disclosure language must align with the state's responsible gambling messaging requirements.
2. Alabama (HB 200, March 2026): Sports betting and casino expansion bill advanced. Constitutional amendment required. Referendum scheduled 3 November 2026. If passed, expect operator applications opening Q1 2027.
3. North Carolina expansion: Following the March 2024 sports betting launch, the state is reviewing online casino authority. No bill yet, but a January 2026 study group reported in favour of expansion. Realistic timeline: 2027 legislative session.
4. Maryland (HB 17 / SB 17, January 2026): iGaming bill reintroduced for the third year. Moved through House committee in March 2026 but stalled in Senate. Expect Q4 2026 reconsideration.
5. New York (S 17 / A 22, January 2026): iGaming framework legislation in the assembly. Governor Hochul has expressed openness pending revenue projections. Realistic 2026 outcome: framework legislation may pass, with launch in late 2027.
6. Illinois (HB 0007, January 2026): iGaming bill in committee. Tribal opposition remains a factor. 2026 passage uncertain; 2027 more plausible.

Pending legislation: bills in flight

Eleven states have active iGaming or sports betting bills as of May 2026. The table below tracks current status, sponsor, and realistic outlook. This is a snapshot; bill status changes weekly.

The clearest near-term opportunities are Maine (sportsbook launch Q1 to Q2 2027), Missouri (sportsbook launch late 2026), and Maryland or New York (iGaming expansion if bills clear). Affiliate program planning should begin 6 to 9 months before licensed operator launch to ensure compliance workflows, [geo-compliance](/glossary/geo-compliance) rule sets, and per-state [commission models](/glossary/commission-model) are configured.

Affiliate marketing implications per state

Affiliate marketing rules vary materially across US states. While federal law (Wire Act, UIGEA) sets the boundary, each state regulator defines what affiliate marketing looks like in practice. Four patterns emerge.

• Permissive-affiliate states (NJ, PA, MI, WV, CT, DE): Affiliate marketing permitted under licensed operator agreements. Affiliate disclosure required (commercial relationship clearly stated). No separate affiliate licence; affiliates operate under operator's licence umbrella. CPA and RevShare commission models both permitted.
• Affiliate-licensed states (NY, IL pending): Some draft frameworks require affiliates to register with the state regulator. New York's pending iGaming framework includes an affiliate certification step. Operators should plan for an additional 30 to 60 day affiliate onboarding window where this applies.
• Geo-restricted-affiliate states (FL, tribal compacts): Affiliate marketing restricted by tribal compact terms. Hard Rock Bet's Florida sportsbook permits affiliate marketing only by licensed parties; non-licensed affiliates promoting Florida-targeted users face geo-blocking enforcement.
• No-marketing states (UT, HI): No regulated gambling means no compliant affiliate marketing. Geo-blocking required at the affiliate level to avoid traffic from these states.

Operators running multi-state programs need per-state commission rules ([geo-based commissions](/glossary/geo-based-commission)) and per-state KYC workflows. A New York player triggers New York KYC standards; a Michigan player triggers Michigan standards. Routing players incorrectly through cross-state KYC creates compliance exposure. This is where multi-state operator infrastructure pays back: the platform must understand which regulator applies based on the player's verified state.

Multi-state operator playbook

Operators planning multi-state affiliate programs in H2 2026 should follow this seven-step playbook. The sequence assumes you already hold or are pursuing operator licenses in target states.

1. Map state-licence inventory: Document each state where you hold an operator licence (or are in application). Map to launch date and affiliate program go-live target. Use this as your master state list.
2. Define per-state commission models: Determine which commission structure applies per state based on regulator restrictions and your internal economics. Some states cap effective commission rates; verify per state. Document in a state x commission model matrix.
3. Build per-state KYC templates: Each state has variations in KYC requirements. Some accept federal ID; some require state-issued ID. Some require self-exclusion register check (e.g., NJ DGE, PA PGCB, MI MGCB self-exclusion lists). Configure templates per state.
4. Configure geo-routing at affiliate placement: Affiliate creative must serve state-appropriate operator brand and offer. Use IP-based geo-routing with hard verification at sign-up (state of residence verified against payment method, ID).
5. Audit affiliate disclosure language per state: Each state has different responsible gambling messaging requirements. New York's responsible gambling footer is different from Pennsylvania's. Audit affiliate placements quarterly per state.
6. Establish state-specific reporting: Each state regulator requires reporting in different formats and frequencies. NJ DGE monthly, PA PGCB quarterly, MI MGCB monthly. Configure reporting per state and run quarterly compliance reconciliations.
7. Plan the entry roadmap for pending states: For each pending-bill state, identify the operator licence application window, affiliate program go-live window, and required infrastructure changes. Maine sportsbook in 2027 is the nearest such opportunity.

The hidden cost of multi-state operations is reconciliation: each state's reporting requirements create work for finance and compliance teams. Operators with affiliate programs in 5+ states report 20 to 40 percent of compliance team time goes to per-state reconciliations. Platform support for [affiliate KPI](/glossary/affiliate-kpi) reporting per state significantly reduces this.

Frequently Asked Questions

External references

• American Gaming Association State of the States 2026: https://www.americangaming.org/research/state-of-the-states/
• National Council of Legislators from Gaming States (NCLGS): https://www.nclgs.org/
• New Jersey Division of Gaming Enforcement: https://www.nj.gov/oag/ge/
• Pennsylvania Gaming Control Board: https://gamingcontrolboard.pa.gov/
• Michigan Gaming Control Board: https://www.michigan.gov/mgcb
• New York State Gaming Commission: https://www.gaming.ny.gov/
• ProBetting US legalisation tracker: https://www.probetting.com/legalization/
• Legal Sports Report state tracker: https://www.legalsportsreport.com/sportsbetting-bill-tracker/

The US iGaming map will remain a patchwork through 2026 and into 2027. The pragmatic operator response is to optimise for multi-state efficiency: per-state commission rules, per-state KYC, and per-state reporting integrated into a single platform. This minimises operational drag as new states come online. Maine, Missouri, and Maryland are the near-term opportunities most worth Q4 2026 planning.

Operational themes for multi-state programs in H2 2026

Three themes recur across operator conversations through Q2 and Q3 2026 and warrant explicit planning. First, the tax-rate gap across states is widening. New Jersey's combined gaming tax sits in the high teens; New York's is materially higher; Pennsylvania's slots tax rate is at the top of the published US range. Affiliate program commission economics differ by state as a result. A New Jersey commission economically equivalent to a Pennsylvania commission may not be sustainable when expressed as a percentage of NGR, because Pennsylvania's tax structure leaves a smaller distributable margin. Operators with single-rate affiliate programs across states often over-pay in high-tax states and under-pay in low-tax states; rebalancing the per-state rate set is a quarterly review worth doing.

Second, self-exclusion register interoperability remains the largest practical compliance friction. Each state maintains its own register; the lack of a federal self-exclusion register means a player self-excluded in New Jersey can open accounts in Pennsylvania, Michigan, and West Virginia without obstacle unless each operator independently checks each register. This is technically possible (operators do check registers) but operationally heavy. Some states' registers update near-real-time; others have batch update cycles measured in hours. Affiliate channels that drive traffic across multiple states should include self-exclusion-register cross-check in the operator's onboarding flow regardless of source.

Third, responsible gambling messaging requirements differ meaningfully across states. Pennsylvania PGCB's required helpline number is different from Michigan MGCB's; New Jersey DGE has additional disclosure obligations on affiliate placements that other states do not. The practical implication: a single affiliate creative usually cannot run unchanged across NJ, PA, MI, WV, and CT. Operators run per-state creative variants (or single creatives with state-rendered footer regions) to meet each regulator's requirements. Affiliate platforms that support per-state creative rendering reduce the operational load here significantly.

These three operational themes (per-state tax gap, self-exclusion register interoperability, per-state RG messaging) are not new in 2026, but they are sharpening as the multi-state operator universe matures and as regulators tighten enforcement. Operators planning Q4 entry into Maine or expansion into Maryland should plan platform-level support for these dynamics rather than treating them as add-on requirements after launch.

Affiliate program design for multi-state operations

Affiliate program design for multi-state US operations differs meaningfully from single-state design and from international multi-jurisdiction design. Three design choices matter most. The first is the commission model: pure CPA, pure RevShare, hybrid, or tiered. Each has different per-state economics depending on tax structure, player LTV in that state, and the state's affiliate marketing rules. New Jersey's mature market typically supports RevShare 25 to 35 percent of NGR; Pennsylvania's higher tax burden often supports lower RevShare bands (20 to 30 percent of NGR); newer states like Connecticut and West Virginia have less established conventions. Operators usually start with hybrid CPA + reduced RevShare to balance cash flow and lifetime alignment, then tune per state after 12 to 18 months of cohort data.

The second design choice is affiliate-portal architecture. A single multi-state affiliate portal serving all states is operationally simpler than parallel state-specific portals; affiliates sign up once and see per-state commission rules, state-specific creatives, and consolidated reporting. Some affiliates are state-exclusive (e.g., a New Jersey bingo community site) and need only NJ data; other affiliates are national publishers (national sports media) and benefit from the multi-state view. Platforms supporting [affiliate KPI](/glossary/affiliate-kpi) reporting per state without forcing parallel portals reduce the affiliate-experience friction.

The third design choice is reporting and reconciliation cadence. Each US state regulator has different reporting requirements: New Jersey DGE monthly, Pennsylvania PGCB quarterly, Michigan MGCB monthly, Connecticut and West Virginia variations. The reporting needs to roll up to a consolidated operator view while also producing per-state regulator outputs in the required format. Operators report that 20 to 40 percent of finance and compliance team time goes to per-state reconciliations; platform support for this is the largest operational-leverage opportunity for multi-state operators in the second half of 2026 and into 2027.

Beyond design choices, ongoing program operation requires three sustained capabilities: per-state affiliate creative library (creatives with state-rendered footers, helpline numbers, and disclosure language), per-state fraud detection (state-specific patterns including self-referral via shared address, multi-account fraud via state-resident impersonation), and per-state payout infrastructure (US affiliate payouts often use ACH, but high-value affiliates increasingly want crypto or check options). The operators succeeding at multi-state operations treat these capabilities as first-class platform requirements rather than ad-hoc additions.