Underage gambling laws: what New Jersey’s bill reveals about age checks and KYC

A security officer at an Atlantic City entrance stops a young-looking customer, asks for a driver’s licence, tilts it toward the light and decides. That two-second judgement call is where most underage gambling laws actually get enforced, and New Jersey lawmakers are now arguing about what should happen when the check fails and a minor gets through.

Senate Bill 597 would stop treating that minor as a criminal. Instead of a disorderly persons offence, they would face a civil fine. The bill has been referred to the Senate Judiciary Committee, and with New Jersey one of only five states whose legislature is still sitting, its sponsors have until the chamber adjourns on 17 December to move it.

What exactly would the New Jersey bill change?

Under current law, an underage person caught gambling in a New Jersey casino commits a disorderly persons offence, a low-level misdemeanour. The penalty starts at a minimum $500 fine, with a maximum of $1,000 for each violation after that. It also leaves a criminal record.

SB597 replaces the criminal charge with an escalating civil penalty:

The statute covers Atlantic City casinos plus simulcast facilities and their sportsbooks. The sponsor, Sen. Jim Beach (D-Camden), has been pushing versions of this for four years. It is cosponsored by two Democrats and two Republicans, and one of them, Sen. Kristin Corrado (R-Caldwell), sits on the committee now holding the bill, which matters more for its chances than any of the rhetoric around it.

Is this decriminalisation, or is it lowering the minimum gambling age?

It is neither a legalisation nor a change to the age threshold. New Jersey’s Casino Control Act still requires casinos to admit only people aged 21 and over to their gaming floors, and that obligation is untouched. Gambling under 21 remains unlawful. The bill only changes the type of penalty a minor faces, and whether the incident produces a criminal record.

That distinction is worth holding onto, because the minimum gambling age in the US is not one number. It is set state by state and often varies by product, with casino floors and sports betting commonly set at 21 while lotteries and some pari-mutuel wagering sit lower. An operator’s compliance team works to the age for its specific licence and product, not to a national rule.

Who else gets fined?

This is the part the industry should read twice. SB597 extends the same civil penalties to employees who knowingly allow an underage person to gamble, and to a parent or caretaker of legal age who helps a minor gamble. That last clause targets a real pattern: the adult who hands over a players card, buys the chips or places the bet on a minor’s behalf.

Money collected from the civil penalties would go to the Department of Human Services, earmarked for compulsive gambling prevention, education and treatment programmes. So the revenue from failed age checks would be routed back into problem-gambling services rather than general funds.

How well do door checks actually work?

Not perfectly, and nobody in the business pretends otherwise. Security staff are stationed at access points and also watch the floor for people who look underage. The common instruction is to card anyone who looks 30 or younger, which builds in a margin of error of roughly a decade. Fake IDs have kept getting better, and a good one beats a glance under lobby lighting.

Regulators respond to that gap by putting the cost on the licensee, not just the customer. The New Jersey Division of Gaming Enforcement handles infractions, and the numbers show what repeated failures are worth. In November 2008 the DGE ordered Bally’s to pay $157,500 after finding the casino had regularly let an underage woman gamble. Earlier that year, in February 2008, Borgata had been fined $105,000, the previous record.

Those are six-figure penalties for something that looks, in the moment, like one bad ID check. That is the deterrent structure working as intended: the operator has systems, cameras, staff training and a compliance budget, so the operator carries the liability.

What does the same problem look like online?

Online, there is no doorway and no security officer, so the check is a data check. A regulated online casino or sportsbook verifies identity through KYC (Know Your Customer), and the practical sequence usually runs like this:

1. Registration data: full name, date of birth, address and government ID number, submitted at sign-up.
2. Automated matching: those details are checked against identity and credit-reference databases to confirm the person exists and is old enough.
3. Document upload: where the automated check is inconclusive, the operator asks for a photo ID, sometimes with a selfie or liveness check, and a proof of address.
4. Payment ownership: deposits and withdrawals must come from an account or card in the player’s own name, which blocks the classic workaround of borrowing a parent’s card.
5. Geolocation: in US regulated markets, software confirms the player is physically inside the licensed state before any wager is accepted.
6. Ongoing screening: accounts are checked against self-exclusion registers and monitored for signs an account is being used by someone other than the registered holder.

The honest weak point is the same as at the casino door: a determined minor with access to an adult’s documents and an adult’s bank card can sometimes get through. What KYC does well is make that a deliberate act of identity fraud rather than a matter of looking old enough, and it leaves an audit trail the regulator can inspect afterwards.

Why does a fine structure matter to the iGaming industry?

Three reasons, and none of them are about the money.

First, reporting incentives. If being caught means a criminal record for a teenager, families and sometimes staff have a reason to keep the incident quiet. A civil penalty makes a detected breach easier to log, and detected breaches are the raw data compliance teams use to find which entrances, which shifts and which verification steps are failing.

Second, funding. Directing penalty revenue to prevention, education and treatment ties the enforcement system to the responsible-gaming system instead of leaving them as separate budget lines.

Third, the liability signal. By putting employees and enabling adults inside the same civil framework, the bill spreads accountability across everyone in the chain, while leaving the licensee’s regulatory exposure, the kind that produced those 2008 fines, where it already sits.

What should operators and players take from this?

For operators, the compliance work does not get lighter if SB597 passes. Age verification at the point of access, staff training on ID examination, and documented KYC before withdrawals are all still licence conditions, and the DGE’s enforcement history shows the regulator treats a pattern of failures as an operator problem.

For players, the practical message is narrower and blunter: verify your own account, in your own name, and never let anyone else use it. Sharing an account with someone underage is the exact behaviour this bill would start fining, and on the operator’s side it usually means a closed account and voided balance.

Responsible-gaming tools sit alongside all of this for adults who do qualify to play: deposit and loss limits, session reminders, cool-off periods and self-exclusion. Gambling carries a built-in house edge and should be treated as paid entertainment, never as income. If it stops feeling like entertainment, the limit and self-exclusion tools are in the account settings, and free confidential help is available through national problem-gambling helplines.