How should a real-money gaming operator run CRM?
Gate first, then grow. Before any journey runs, confirm the player is of legal age, is in a state where your product is legal, has given documented consent, and isn't self-excluded. Then build the core journeys (welcome, first deposit, second deposit, VIP, at-risk and reactivation) on a platform whose policy doesn't exclude gambling. Klaviyo's does. Customer.io's doesn't, but it requires consent and age gating.
The player lifecycle, gated
The compliance gate isn't a step in the journey. It runs on every send, because a player's eligibility can change between Tuesday and Friday.
What we build
We speak the language your retention team reports in (FTD, second deposit, NGR, churn and reactivation) and build journeys around those numbers.
- Welcome and verification: finish KYC, set deposit limits, learn the product
- First-deposit journey with plain-language bonus terms
- Second-deposit and early-habit journeys that show real value, never pressure
- VIP identification and host handoffs using predictive value scores
- At-risk (AWOL) detection with frequency caps and cooldowns
- Reactivation that leads with a limits reminder
- For sweepstakes operators: Gold Coin and Sweeps Coin promotion logic and redemption journeys
- Email, SMS, push and in-app on one calendar, so players aren’t hammered
Responsible by design
The fastest-growing operators treat responsible gaming as part of retention, not a footer someone pastes in. Here’s what we build in:
- Age gating to the legal age for your product in each state
- State-level geo suppression for the states your counsel identifies, updated when you tell us the law changes
- Self-exclusion and cool-off lists honored across every channel
- Responsible gaming messaging and helpline on every message
- Bonus and promotion terms stated clearly, with no hidden wagering surprises
- Frequency caps and quiet hours; SMS only with documented TCPA consent
- Affordability and play-pattern signals that slow outreach down, not up
Sweepstakes operators: the map is moving
State action against dual-currency sweepstakes casinos accelerated in 2026. Indiana’s ban took effect July 1, 2026. Maine, Tennessee, Louisiana and Iowa also enacted bans or enforcement laws, and Oklahoma overrode a veto to pass a ban that takes effect November 1, 2026. Some of these laws reach promoters and service providers as well as operators. Your CRM has to suppress newly restricted states the day a law takes effect, and your messaging has to hold up if a state attorney general reads it.
We work with sweepstakes operators whose counsel has confirmed where the model is lawful and who are ready for tighter rules. We don’t knowingly message players in states your counsel has flagged as banned, and we update suppression as soon as you tell us the map has changed.
Why gaming runs on Customer.io, not Klaviyo
Klaviyo’s acceptable use policy prohibits gambling services, including online poker, casino games, lotteries and sports betting. Customer.io’s policy doesn’t ban gambling as a category. For SMS and mobile messages about gambling it requires recipient consent, age gating by the recipient’s location, content that’s lawful where the recipient lives, and proof those controls exist. Customer.io can still decline any account. We build to those requirements; see the full platform comparison.
Frequently Asked Questions
Can online casinos or sportsbooks use Klaviyo?
Can sweepstakes casinos use Customer.io?
Which states have banned sweepstakes casinos?
What is an FTD in iGaming CRM?
How do you handle self-excluded players?
Do you work with offshore or unlicensed operators?
Sources
Reviewed by Damon Didier, Owner & CEO of WIN, with 18+ years in email and lifecycle marketing. Last reviewed October 23, 2026.
Policies and regulations change, so we review these pages at least quarterly. This page is general information, not legal advice.