Scope of the licence
The SRIJ platform authorisation covers the supply of platform and integration services to Portugal-licensed operators, including wallet, bonus engine, CRM hooks, game aggregation, reporting and regulator-facing transcripts.
The scope does not include direct player-facing operation, that sits with the licensed operator.
Certification chain
Independent testing delivered by GLI- and BMM-tier laboratories. Control assurance aligned with ISO 27001 and PCI-DSS v4 on the payment perimeter.
Signed evidence bundle delivered to operators for their own annual regulatory submission.
Operational fit with Brazil (SPA / SIGAP)
The SRIJ process is a strong dry-run for Portuguese-speaking operators expanding into Brazil, since the reporting schema and control vocabulary overlap substantially. Operators moving in that direction save roughly 20–30 percent of the cert effort.