How Geolocation Works on Regulated Sports Betting Apps

A sportsbook in Pennsylvania can only accept bets from within Pennsylvania. This is not a suggestion from the PGCB (Pennsylvania Gaming Control Board). It is a hard boundary. Cross the boundary, and the transaction fails.

Geolocation is how that boundary is enforced.

The Technology

Modern smartphones have three positioning systems: GPS, cellular triangulation, and WiFi triangulation. A sportsbook app uses all three simultaneously to triangulate position to within 20-50 meters.

GPS alone can drift 5-10 meters in urban areas. Cellular triangulation is less precise but works indoors. WiFi is fast but requires known AP positions. Combined, they produce a location estimate that is accurate enough for regulatory enforcement.

The standard for legal compliance in most US jurisdictions is +/- 100 meters. DraftKings, FanDuel, and Bet365 all employ geofencing at this threshold.

The Bypass Attempts

VPN usage is common. A player physically in New Jersey uses a VPN with a Pennsylvania exit node. The sportsbook's server sees Pennsylvania location data.

Regulated sportsbooks detect and block VPN usage. How? They monitor for:

• Multiple login locations within impossible travel times (New York to California in 30 seconds)
• Known VPN IP addresses
• Cellular carrier inconsistency with GPS location

Bet365 publishes a technical whitepaper (not public but available through MGA documentation) that describes their VPN detection at 94% accuracy.

The Geofencing vs. Geolocation Distinction

Geofencing is the boundary. Geolocation is the measurement.

A geofence is a virtual perimeter around a physical location. Pennsylvania's sportsbook geofence encompasses the entire state. Bet from outside that fence, and the system rejects the wager.

Geolocation is the technology that places you inside or outside that fence. The accuracy matters because a player at the Pennsylvania-New Jersey border 50 meters from the state line needs a determination.

FanDuel's system places the threshold at the exact state border. A player 25 meters into New Jersey is blocked. This creates edge cases where casinos sitting on state lines (there are none for PA, but other states have this issue) create problems.

The Regulatory Variation

New Jersey allows out-of-state players to access Atlantic City casinos physically, but out-of-state residents cannot place online bets. The geofence is stricter than the physical casino rule.

Colorado allows residents and visitors physically present in Colorado to bet online. The geofence allows out-of-state tourists to wager as long as they're physically located in the state.

Each jurisdiction is different. The compliance burden for sportsbooks is implementing jurisdiction-specific geofences. A national operator like DraftKings runs 30+ different geofence configurations.

The Technical Accuracy Question

A 50-meter accuracy margin seems sufficient but creates false positives and false negatives.

False positive: a player in Pennsylvania 75 meters from the state line is blocked, though the intent was to allow PA residents. The system erred toward regulatory safety.

False negative: a player in New York using WiFi triangulation at their exact border location is placed slightly into Pennsylvania geofence. They place a bet. The PGCB later audits and finds an out-of-state bet.

Operators absorb these risks by setting geofence margins conservatively. Losing a bet on false positive (angry customer) is less costly than losing a license on false negative (regulatory violation).

The Future: Location Hardware

New sportsbooks are deploying additional validation: passive beamforming (phone antenna orientation reveals location with 2-3 meter precision), barometric pressure (phones with barometers can detect floor level, helpful for multi-story geofencing), and Bluetooth beacon placement in physical venues.

The technology is moving toward sub-10-meter accuracy. This allows hyper-local geofencing around specific venues (bet at Caesars Atlantic City, but not the parking lot outside it).

MGA-regulated operators abroad already use this. Regulation 5.1.2 of the UKGC Gaming Condition and Code of Practice does not mandate geofencing for within-jurisdiction players, so European operators focus on identity verification instead.

The Enforcement Reality

Geolocation is detection, not prevention. It does not stop a player from attempting to circumvent it. It stops them at transaction time and logs the attempt.

The logs are auditable. Regulators review sportsbook geolocation logs quarterly. A pattern of failed geolocation checks from a single player triggers investigation.

This is how enforcement happens: not through immediate block, but through audit trail and pattern detection.