When people talk about online casinos, they often treat them as a single entity. The casino is assumed to design the games, set the odds, control outcomes, and profit directly from every wager placed. In reality, online gambling operates as a layered ecosystem, where responsibility, control, and revenue are distributed across several distinct actors.
Game providers create and mathematically define the products players interact with. Casino websites act as platforms that license those products, manage player accounts, handle payments, and absorb risk at scale. Affiliates sit further downstream, promoting access, explaining offers, and directing traffic, but never touching game mechanics or player funds. Each layer plays a different role, yet players typically only see one of them.
Understanding how money actually flows through this system helps clarify many common misunderstandings about RTP, fairness, bonuses, and accountability. Once the layers are separated, online gambling stops looking like a single opaque machine and starts to resemble what it really is: a supply chain, where creation, distribution, and promotion are handled by different parties, each operating under their own incentives and constraints.
TL;DR: Online gambling operates as a layered system. Game providers design and control the games, including RTP and volatility. Casinos license those games, manage player accounts, payments, bonuses, and regulatory compliance, and keep a margin for absorbing risk and operating the platform. Affiliates sit downstream, promoting access and explaining offers, but they do not control games or touch player funds. Confusion arises because players only interact with the casino layer, even though control and revenue are distributed across the entire stack.
Game Providers Sit at the Top of the Stack
At the top of the online gambling ecosystem sit the game providers. These are the companies that design, build, and mathematically define the games players actually interact with. Every slot, table game, or live dealer product begins its life here, long before it ever appears inside a casino lobby.
Game providers control the elements that matter most to outcomes. They set RTP, volatility, symbol weighting, bonus mechanics, and game logic. Once a game is built, it is submitted for testing and certification as a complete product. From that point on, the maths are fixed for that specific version. Casinos do not rewrite this logic, adjust probabilities, or influence how individual games behave.
Companies such as NetEnt, Play’n GO, Pragmatic Play, and Microgaming operate at this level. Their business model is built around creating games that can be licensed repeatedly across hundreds of casinos, generating revenue through licensing fees or revenue-share agreements tied to player activity.
This positioning matters because it explains where true control lies. When players talk about odds, RTP, or how a game “feels,” they are responding to design decisions made upstream by providers, not to choices made by the casino hosting the game. The casino distributes the product. It does not manufacture it.
Casinos Operate the Platform and Manage Risk
Casinos sit in the middle of the online gambling ecosystem. They do not design games, but they are responsible for everything that happens once a player logs in. This includes operating the platform, managing player accounts, handling deposits and withdrawals, enforcing KYC and responsible gambling rules, and providing customer support.
From a financial perspective, casinos act as risk managers and distributors. They license games from providers, integrate them into their systems, and make them available to players across different markets. In return, they keep a portion of the revenue generated by player activity, while the rest flows upstream to game providers under licensing or revenue-share agreements.
This middle position explains many casino behaviours that players notice but often misinterpret. Bonuses, loyalty schemes, and promotions are tools casinos use to acquire and retain players, not levers to control game outcomes. Likewise, bankroll management is about absorbing short-term volatility across thousands of players, not adjusting the maths of individual games. A casino can decide which games to offer and how prominently to feature them, but once a game is live, its behaviour is fixed by the provider.
Casinos also carry the bulk of regulatory responsibility. They are the entities licensed by regulators, accountable for player protection, payment integrity, and compliance. Even though they do not create the games themselves, they are the visible face of the system, which is why blame and suspicion often land here when something feels unfair.
Affiliates Sit Downstream and Promote Access, Not Outcomes
Affiliates occupy the lowest layer of the money flow, but they are often the most visible starting point for players. Review sites, comparison pages, and guides introduce the best casino sites, explain bonuses, and help users navigate an increasingly complex landscape. What affiliates do not do is participate in game operation, outcome generation, or fund management.
Affiliates are paid by casinos, not by players directly, and only after player activity occurs. Their revenue typically comes from revenue-share or hybrid agreements, where compensation is linked to the long-term value of referred players rather than to individual bets or losses. This means affiliates have no influence over RTP, volatility, game configuration, or RNG behaviour. They do not touch player funds and have no technical access to casino systems beyond tracking referrals.
This position explains both the influence and the limitations of affiliate content. Affiliates can compare platforms, highlight licensing, explain how bonuses work, and point out differences in transparency or terms. They cannot alter how games behave or guarantee outcomes. When players conflate affiliates with casinos, or casinos with game providers, responsibility becomes blurred and mistrust grows in the wrong direction.
Seen clearly, affiliates act as interpreters rather than operators. They sit downstream of the money flow, translating a complex system into something players can understand, while remaining structurally removed from the mechanics that determine wins and losses.
How Money Actually Flows Through the System
Once the roles are separated, the money flow in online gambling becomes much easier to understand. Player stakes enter the system at the casino level, not at the provider or affiliate level. From there, revenue is distributed upstream and downstream according to pre-agreed commercial arrangements.
When a player places a bet, the casino temporarily holds the funds and settles the outcome. Over time, the net revenue generated by player activity is split. Game providers receive their share through licensing fees or revenue-share agreements tied to the performance of their titles. Casinos retain a margin to cover operational costs, regulatory compliance, payment processing, bonuses, and risk management. Affiliates are paid from the casino’s share, usually based on the long-term value of referred players rather than on individual wagers.
This structure is why it is misleading to say that any single layer “takes” player losses. Providers are paid for supplying games. Casinos are paid for operating platforms and absorbing volatility. Affiliates are paid for marketing and education. Each layer earns revenue by performing a specific function, not by directly controlling outcomes.
Understanding this flow also explains why incentives differ. Game providers focus on creating games that perform well across many casinos. Casinos focus on retention, liquidity, and compliance. Affiliates focus on clarity, comparison, and expectation-setting. When these incentives are confused, players often attribute intent or control to the wrong part of the system, which fuels many of the myths surrounding online gambling.
Why Regulation Targets Casinos, Not Providers or Affiliates
Regulation in online gambling is designed around financial control rather than product creation. Regulators license casinos because casinos are the point where player funds are held, bets are settled, and withdrawals are processed. This makes them the natural enforcement layer, even though they do not design the games themselves.
Bodies such as the UK Gambling Commission require casinos to ensure that all games they offer are properly certified, that player funds are protected, and that responsible gambling measures are enforced. Game providers are typically regulated indirectly, through certification and approval processes tied to specific jurisdictions, rather than through direct consumer-facing licensing. Affiliates, meanwhile, operate outside the gambling transaction entirely and are regulated primarily through advertising standards rather than gambling law.
This structure creates an imbalance in visibility. Casinos appear to hold all the power because they are the licensed entity players interact with, even though much of the underlying control sits upstream. When something goes wrong, or simply feels wrong, responsibility naturally collapses onto the casino, because it is the only regulated party the player can see.
Understanding this helps explain why casinos are often cautious in their public communication. They carry regulatory and reputational risk for systems they did not design, and they are expected to mediate between players, providers, and regulators. The fact that regulation targets the middle of the stack reinforces the misconception that casinos sit at the top, when in reality they operate as the most accountable layer in a much larger system.
Why Regulation Targets Casinos, Not Providers or Affiliates
Regulation in online gambling is designed around financial control rather than product creation. Regulators license casinos because casinos are the point where player funds are held, bets are settled, and withdrawals are processed. This makes them the natural enforcement layer, even though they do not design the games themselves.
Bodies such as the UK Gambling Commission require casinos to ensure that all games they offer are properly certified, that player funds are protected, and that responsible gambling measures are enforced. Game providers are typically regulated indirectly, through certification and approval processes tied to specific jurisdictions, rather than through direct consumer-facing licensing. Affiliates, meanwhile, operate outside the gambling transaction entirely and are regulated primarily through advertising standards rather than gambling law.
This structure creates an imbalance in visibility. Casinos appear to hold all the power because they are the licensed entity players interact with, even though much of the underlying control sits upstream. When something goes wrong, or simply feels wrong, responsibility naturally collapses onto the casino, because it is the only regulated party the player can see.
Understanding this helps explain why casinos are often cautious in their public communication. They carry regulatory and reputational risk for systems they did not design, and they are expected to mediate between players, providers, and regulators. The fact that regulation targets the middle of the stack reinforces the misconception that casinos sit at the top, when in reality they operate as the most accountable layer in a much larger system.