Lottery Company Governance: Board, UBO and Decision-Control Checklist
Connect ownership, authority, board information, related-party decisions and operational controls in a lottery-company governance framework.
A lottery company’s governance framework should make ownership, authority and accountability understandable to the people who operate and oversee the business. Connect the ownership record, board practice, delegated decisions and supplier controls instead of treating them as separate files.
This checklist organises facts and decision workflows for professional assessment. It does not determine beneficial-ownership thresholds, filing duties, required approvals or the powers of a particular board. Those questions depend on the company’s documents and applicable requirements, which the relevant qualified advisers should confirm.
Map ownership and influence, not just the shareholder chart
Assemble the legal ownership chain and the facts needed to identify relevant natural-person beneficial owners, often called UBOs. Record voting arrangements, shareholder agreements, options, financing rights, vetoes, profit rights and other sources of influence. Ask counsel or the relevant professional to determine the definitions and disclosures that apply.
Compare that record with corporate, banking, counterparty and permission-related information supplied for the same business. Resolve differences rather than tailoring incompatible explanations for different audiences. Limit access to personal and ownership evidence to authorised recipients and retain the source and date of each record.
Formal delegation also needs to reflect actual behaviour. If informal founder instructions determine decisions that the matrix allocates elsewhere, investigate that mismatch. A tidy ownership file does not by itself demonstrate effective oversight.
Turn decision control into a usable authority matrix
Build an operational matrix from the company’s constitutional documents, shareholder arrangements, financing terms, permissions and relevant professional conclusions. Separate consultation, recommendation, approval and notification. State the decision-maker, limits, deputy, evidence required and person who checks that the route was followed.
| Decision | Questions for the approval route |
|---|---|
| Markets, products and domains | Who assesses the change, obtains specialist conclusions and approves the agreed boundaries? |
| Suppliers and payment routes | Which commercial, data, security and control risks matter independently of contract spend? |
| Budgets and commitments | What authority applies to spending, funding exposure, financing and changes to commitments? |
| People and policies | Who approves key appointments, access, control policies and delegation changes? |
| Incidents and customer controls | Who can act urgently, pause an affected service and escalate beyond the normal team? |
| Ownership and related parties | Who assesses conflicts, required professional review and conditions before implementation? |
Do not use price alone as a proxy for risk. A modest integration can still introduce substantial access or operational dependencies. Define an urgent-event route that preserves the necessary controls without requiring an impractical full meeting for every adjustment. Translate supplier evidence requirements into the lottery provider RFP checklist.
Give the board information it can challenge
Design a board or oversight pack for the actual operation. Consider financial performance, balances and settlement exposure, complaints, relevant financial-crime and safer-gambling controls, security incidents, material suppliers, authority correspondence and open remediation. Each item needs an owner, source, explanation of exceptions and access to the underlying evidence.
A dashboard should make uncertainty visible, not remove adverse information because an investigation is unfinished. Circulate material early enough for questions and record challenges, decisions, conditions and follow-up owners accurately. Assign a response date to unresolved items and escalate missed actions through the agreed route.
Use the payment-stack guide to specify useful settlement and reconciliation evidence. Use the security and SLA checklist for incident, recovery and assurance questions. Neither article establishes the company’s professional or regulatory obligations.
Make conflicts and related-party decisions visible
Maintain declarations from the relevant directors and staff, a related-party register and a defined route for recusal or independent assessment. Ask the appropriate professional to confirm requirements for the actual arrangement. Keep conflict handling separate from assessing whether a supplier’s service is commercially useful.
For a founder-owned supplier, shareholder loan or group service, record the relationship, alternatives considered, commercial terms, conflicted participants and authorised decision-maker. Preserve the evidence behind the choice. Do not assume that a signature or informal consent resolves every approval or disclosure question.
Before an ownership, financing or key-person change, ask the relevant specialists what prerequisites, notifications or approvals apply and who owns them. Record unresolved conditions before implementing the change. This guide does not supply those jurisdiction-specific answers.
Scenario: an urgent launch skips the control route
Imagine the commercial team signs a lottery-product supplier and starts integration before the required internal security and control assessments, arguing that the spending threshold was not exceeded. This is an illustrative scenario, not a WhiteLotto case study.
Use the incident to examine the matrix: data access, settlement dependencies, customer impact and specialist questions may matter more than price. Hold the affected release pending the appropriate assessment and decision. Have the responsible owners determine the next commercial and contractual steps rather than manufacturing a backdated approval.
Record what happened, why the route failed and which comparable engagements need attention. Adjust responsibilities, training or thresholds where the authorised decision-makers conclude that a change is needed. Carry the decision and remaining conditions into the go-live readiness checklist.
Maintain one governance control file
Keep the current authority matrix, meeting calendar, committee terms, delegated mandates, conflict register and overdue actions together under an identified owner. Reconcile appointments, departures and changed responsibilities with system access and contractual mandates. Ask the relevant specialists to determine any associated corporate, banking or permission-related actions.
Version the files and preserve evidence of material decisions, not just the latest clean template. Review whether recorded authority still matches practice. Governance should also inform how the business evaluates a new lottery vertical: the operator business-case worksheet helps frame the commercial decision separately from its approval route.
Governance checklist for operator readiness
- Assemble consistent ownership, influence, director and key-person facts.
- Obtain professional conclusions on relevant definitions and requirements.
- Define reserved decisions, delegations, signing authority and deputies.
- Provide sourced oversight information, exceptions and open actions.
- Record conflicts, related-party assessments and decision participants.
- Assess change prerequisites before implementing material changes.
- Rehearse urgent decisions and correct gaps between records and practice.
- Preserve accurate decisions and a versioned governance control file.
Primary references and limitations
The G20/OECD Principles of Corporate Governance 2023 provide general governance background. FATF guidance on beneficial ownership of legal persons explains the international policy framework and information sources around corporate beneficial ownership.
Neither reference determines a particular lottery company’s filing duties, control thresholds or authority to operate. This checklist does not replace constitutional documents, professional advice or applicable requirements. Good records alone do not guarantee acceptance by an authority or counterparty; the controls must also work in practice.
Connect governance to the platform brief
Take approved responsibilities, access requirements and decision boundaries into a WhiteLotto platform-scope discussion. Confirm technical feasibility and supplier responsibilities without treating the software supplier as the company’s legal, tax or governance adviser.
Original source material by Avant-Garde Management B.V. (AGM). Adapted for lottery operators by WhiteLotto Team on 4 October 2026. This editorial adaptation is not an independent legal, tax or regulatory review.