ESIC sets 17 controls for automated esports betting

The Esports Integrity Commission launched its CPU v CPU Gold Standard on Oct. 29, 2026, establishing 17 mandatory controls for automated esports competitions whose results are used by betting markets.

The framework covers the software that generates match outcomes, the infrastructure hosting it and the personnel authorised to operate or modify those systems. It addresses competitions in which software controls the participants and changes to hidden code could affect results.

The standard sets separate requirements for three types of decision-making systems. Operators using locally deployed machine-learning models must cryptographically sign and verify model files before execution. Two authorised people must approve each deployment.

Operators using externally hosted large language model APIs must use providers approved by ESIC, identify specific model versions and record every call with a timestamp. External web retrieval must be disabled, and operators cannot use rolling “latest” model aliases.

For deterministic or rules-based algorithms, operators must record exact build versions and artifact hashes. Code reviews must check for hidden triggers and inactive conditional logic that could change results. During live matches, all software pathways must use automated lifecycle controls, and manual intervention is prohibited. Systems must perform consistency checks and suspend operations automatically when technical anomalies occur.

Operators must use centralised identity management, multi-factor authentication, default-deny firewalls and separate development, testing and production environments. Infrastructure requirements include weekly vulnerability scans, deadlines for addressing risks based on their severity and a ban on unresolved critical security vulnerabilities.

Organisations seeking accreditation must pass independent audits, maintain continuous compliance and participate in ESIC’s Suspicious Betting Alert Network. At the time of the announcement, BETBY was the only accredited organiser under ESIC’s Esports Platform Gold Standard for automated CPU versus CPU betting platforms.

In a statement, ESIC Chief Executive Stephen Hanna described the accreditation as a recognised standard for organisers and other stakeholders. He said it could give audiences, partners and the wider esports community greater confidence in the competitions they follow. Hanna added that ESIC would work with the industry as the standard is adopted to support a more consistent, transparent and credible CPU vs CPU ecosystem.