Ontario’s Alcohol and Gaming Commission imposed a CA$100,000 penalty on NorthStar Gaming (Ontario) Inc. on August 27, 2026. The regulator alleges the operator failed to apply enhanced anti-money-laundering controls to a high-risk player.

The case puts pressure on operators to show that their compliance systems trigger timely action, not simply record warning signs in written policies.

Risk threshold was reached in March 2024

The Alcohol and Gaming Commission of Ontario said the player disclosed an occupation that NorthStar’s own policies classified as high risk.

The player reached the company’s CA$25,000 lifetime-deposit threshold in March 2024. The regulator alleges NorthStar did not classify the account as high risk, verify the source of funds or begin an enhanced due-diligence review.

The details are set out in the regulator’s penalty release, reported by Newswire.

Deposits continued for more than a year

According to the Alcohol and Gaming Commission of Ontario, the player continued depositing funds after the company’s controls should have been triggered.

  • More than CA$55,000 was deposited in December 2024 alone.
  • Total deposits later reached approximately CA$189,395.
  • The account was classified as high risk and terminated in June 2025.

The regulator said NorthStar’s policies required escalating action when money-laundering indicators appeared. Possible measures included refusing transactions or excluding the player.

The regulator alleges NorthStar did not take those steps until June 2025, after inquiries by the Alcohol and Gaming Commission of Ontario.

“Anti-money laundering controls must be more than policies on paper,” Karin Schnarr, the commission’s registrar and chief executive officer, said in the regulator’s release.

What Ontario’s rules require

Ontario’s Registrar’s Standards for Internet Gaming require operators to take reasonable measures to identify, minimize and manage suspected money-laundering risks.

The framework includes risk-based controls, source-of-funds checks and escalating interventions when circumstances warrant them.

The NorthStar case focuses on whether those controls worked in practice. The regulator’s position is that a written policy is not enough if staff or automated systems fail to trigger the required response.

Police charge prompted the review

The Alcohol and Gaming Commission of Ontario said its compliance review began after the player was charged by police in connection with Project Outsource.

Project Outsource was a joint law-enforcement operation targeting alleged criminal activity, including extortion and violence, in Ontario’s towing industry. The charge is an allegation, not a conviction. The regulator did not identify the player.

The regulator’s release does not allege that NorthStar knowingly handled criminal proceeds. It describes alleged failures to apply the operator’s own controls after risk indicators appeared.

NorthStar’s compliance structure faces scrutiny

NorthStar announced on August 17 that it had appointed Krisztina Kalla as vice-president of compliance. The company said she would oversee its regulatory compliance function.

NorthStar also said its Ontario platform operates under an agreement with iGaming Ontario and registration with the Alcohol and Gaming Commission of Ontario. The company update was published on NorthStar’s website.

The company may request a hearing before Ontario’s independent Licence Appeal Tribunal within 15 days of being served with the monetary penalty order.

The penalty and the regulator’s allegations can therefore still be contested.

Why the penalty matters to Ontario operators

Ontario’s private iGaming model gives operators a central role in detecting suspicious activity. iGaming Ontario manages the market and contracts, while the Alcohol and Gaming Commission of Ontario regulates compliance.

The penalty shows that the regulator is examining whether operators respond when player activity crosses a defined risk threshold.

  • Deposit activity must be connected to player risk information.
  • Enhanced due diligence must lead to action, not only file notes.
  • Source-of-funds checks become critical when internal thresholds are reached.
  • Account restrictions or termination may be required when risk indicators remain unresolved.

For Ontario’s regulated market, the practical test is whether operators can show that their systems identify high-risk activity promptly and document a response before deposits continue at scale.